Re: [Full-disclosure] hPRoTeCT Labs Releases vulnfind

From: blad3 (fd_at_blad3.ro)
Date: 04/28/05

  • Next message: Martin Schulze: "[Full-disclosure] [SECURITY] [DSA 718-1] New ethereal packages fix buffer overflow" 
    To: <full-disclosure@lists.grok.org.uk>, <hprotect@hushmail.com>
Date: Thu, 28 Apr 2005 11:50:44 +0300

    You forgot to mention hPRoTeCT Labs home page.
    I'm unable to find anything related with hPRoTeCT Labs on Google.

    ----- Original Message -----
    From: <hprotect@hushmail.com>
    To: <full-disclosure@lists.grok.org.uk>
    Sent: Wednesday, April 27, 2005 9:57 PM
    Subject: [Full-disclosure] hPRoTeCT Labs Releases vulnfind

    > hPRoTeCT Labs is pleased to announce the release of vulnfind, an
    > automated universal vulnerability discovery and exploitation
    > engine. vulnfind permits the universal and automated discovery of
    > vulnerabilities across all Windows XP platforms via the
    > instrumentation of shared library code responsible for virtually
    > all vulnerabilities. An advanced 'detours' hook library instruments
    > the shared library code responsible for 'strcpy', a major cause of
    > vulnerabilities, and notifies when the saved frame pointer and
    > return address ('ebp' and 'eip') will be compromised due to excess
    > string length. In addition, vulnfind permits vulnerability
    > discovery and penetration tests alike via run-time replacement of
    > the compromised return address ('eip') with an address of memory-
    > resident shellcode resident in the memory of the process.
    >
    > vulnfind is released as open 'c' source and it will be ported to
    > 'c++' in the coming weeks. vulnfind, along with over 250 other c,
    > cpp, cxx, and h files written by hPRoTeCT staff, is available via
    > the hPRoTeCT Labs home page, in addition to over 250 other
    > projects.
    >
    > The availability of additional projects will be announced to all
    > mailing lists upon becoming available.
    >
    > Wiley Miller
    > Product Manager, hPRoTeCT Labs
    >
    >
    >
    > Concerned about your privacy? Follow this link to get
    > secure FREE email: http://www.hushmail.com/?l=2
    >
    > Free, ultra-private instant messaging with Hush Messenger
    > http://www.hushmail.com/services-messenger?l=434
    >
    > Promote security and make money with the Hushmail Affiliate Program:
    > http://www.hushmail.com/about-affiliate?l=427
    >
    > _______________________________________________
    > Full-Disclosure - We believe in it.
    > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
    > Hosted and sponsored by Secunia - http://secunia.com/
    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.grok.org.uk/full-disclosure-charter.html
    Hosted and sponsored by Secunia - http://secunia.com/

  • Next message: Martin Schulze: "[Full-disclosure] [SECURITY] [DSA 718-1] New ethereal packages fix buffer overflow"

    Relevant Pages

    • [Full-disclosure] hPRoTeCT Labs Releases vulnfind
      ... hPRoTeCT Labs is pleased to announce the release of vulnfind, ... automated universal vulnerability discovery and exploitation ... vulnerabilities across all Windows XP platforms via the ... the hPRoTeCT Labs home page, in addition to over 250 other ...
      (Full-Disclosure)
    • [Full-disclosure] RE: hPRoTeCT Labs Releases vulnfind (hprotect@hushmail.com)
      ... > automated universal vulnerability discovery and exploitation ... > vulnerabilities across all Windows XP platforms via the ... In addition, vulnfind permits vulnerability ... > the hPRoTeCT Labs home page, in addition to over 250 other ...
      (Full-Disclosure)