[Full-disclosure] "Fire and forget" exploits?
- From: "Brendan Dolan-Gavitt" <mooyix@xxxxxxxxx>
- Date: Fri, 20 Oct 2006 10:34:19 -0400
I'm looking for examples of (remote) security vulnerabilities whose
exploitation involves no guesswork--eg, no bruteforcing the return
address, or altering your exploit based on the server's response, etc.
It seems like this kind of exploit is dying out, particularly as
different flavors of Linux proliferate, each with their own slightly
different libc and userland; in the Windows world, however, we still
find "universal" exploits that work on NT4/2k/XP over a variety of
Anyways, if anyone has come across things like this, I'd greatly
appreciate hearing about it. I'm working on some new methods to
deliver exploits at once while minimizing recon.
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/
- Prev by Date: Re: [Full-disclosure] [funsec] tiny PE now at... 304 bytes. Is this the end?
- Next by Date: Re: [Full-disclosure] Devil Linux has NO irc bots onboard
- Previous by thread: [Full-disclosure] tiny PE now at... 304 bytes. Is this the end?
- Next by thread: Re: [Full-disclosure] "Fire and forget" exploits?