Re: C# Exceptions

Patrick, thanx for the detailed email.

We are able to crash the application over the network by intercepting
the traffic that goes in to the target application from the
legitimate web serivces. We got these three different exceptions for
different type of fuzzed data. Now before we move forward we were
planning to see what would be our best option out of these three
exceptions or memory dump that could give us remote code execution or
at least best chance of penetration.

Since buffer overruns are not possible in a .Net applicaiton what if
we target a bufferoverrun in .Net itself? We got a couple of crashes
that crashed .Net instead of generating any exceptions.

If we were to pursue our best possibility of penetration what would it be?

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------

Relevant Pages

  • Re: Falafel Bill OReilly Calls for Terrorist Attack on San Francisco
    ... >> Bill O'Reilly is right on target. ... Anybody that receives federal funds ... >> should have to let recruiters in. ... No exceptions. ...
    (rec.arts.tv)
  • Re: dumping call stack in c++
    ... Right well the target machine is using embedded win xp its not a straight ... And as for machine crash, it is a complete lock up. ... windows is a very unstable platform crashes like this that result in total ... >>> platform which will not allow for remote debugging. ...
    (microsoft.public.vstudio.development)
  • Re: Visual Studio 2005 with Standard SDK 4.2
    ... in eVC 4 and later. ... support C++ exceptions, but eVC is fine with them. ... Paul T. ... but what changed so that you can't target CE 4.2? ...
    (microsoft.public.windowsce.embedded.vc)
  • Which Rows Failed & Exceptions Handler
    ... I need to write to the error log when there is an error ... DTS job, and to keep loading for the rest of the rows. ... Are I tell my target db which rows it failed but continue ... Are there good samples out there to handle exceptions? ...
    (microsoft.public.sqlserver.dts)
  • "Internet Explorer cannot download"
    ... Whenever I attempt to download a file (exceptions - ... rightclick on a link and ... use "Save Target As" or click on a link that ... Internet Explorer was not able to open this Internet ...
    (microsoft.public.windows.inetexplorer.ie6.browser)