Re: Re New Binary Bruteforcing Method Discovered

From: Jeff Schaller (schaller@freeshell.org)
Date: 03/28/02 

Date: Thu, 28 Mar 2002 01:21:38 +0000 (UTC)
From: Jeff Schaller <schaller@freeshell.org>
To: John <johns@tampabay.rr.com>

On Wed, 27 Mar 2002, John wrote:

> A while back there was a tool that was released that would brute force
> binaries and attempt to exploit the bug. It attempted to exploit simple
> stack overflows, but it was a nice tool at the time.
>
> http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0710.html

<two cents>
I wrote a paper for SANS last summer which surveyed the available
auditing tools (source code scanners, black box testers, and known
exploits). Against the simple target program I chose (Hobbit's
"webs"), the black-box testers failed miserably, for reasons that
I go into in the paper (basically, that they aren't
protocol-aware). Brute-force black-box scanners catch the
low-hanging fruit, bug-wise.

Direct URL (the report is the HTML file inside the ZIP file):
        http://www.giac.org/practical/Jeff_Schaller_GSNA.zip

Other reports available from:
        http://www.giac.org/GSNA.php
</two cents>

-jeff 

-- 
Last week, scientists announced the first-ever cloning of a human embryo,
which they hope to mine for stem cells to treat diseases. What do you think?
"I think I'll just sit back and let the ignorant, hysterical Christians
handle this one." Peter Jordan, Systems Analyst. The Onion.

Relevant Pages

  • Re: Heres your Red Cross....
    ... spends 3.something percent to raise a dollar. ... something cents to raise a dollar. ... The point isn't that RC's figures are accurate, but that the faith-based orgs don't have to report the docs that allow calculation of the common stats that allow easy comparison. ... self-appointed, and VERY closely held org says if I can see evidence of good works. ...
    (rec.outdoors.fishing.fly)
  • Re: Line Spacing?
    ... Understand what the On Print event is: When an Access report is run, ... "Rick" wrote in message ... > Okay I tried the VBA code and here's what I put in and I ...
    (microsoft.public.access.reports)
  • Even refunding, they resort to cheating
    ... After reading the report in Shin Ming Daily news dated 19th Dec, ... machine to try the refund on 21st Dec. ... I took down the amount that was deducted wrongly from my card. ... a manual claim from transitlink website, and got back another 60 cents that ...
    (soc.culture.singapore)
  • Re: Delphi 2005 Blue Screening
    ... > onwards) when it tries to display an HTML file. ... try opening any old html file from D2005. ... as report number QC 9859. ...
    (borland.public.delphi.non-technical)
  • Export Chart as HTML
    ... html file that I can load into Sharepoint for end users to view. ... report with the chart and I can print the report and export it as a snapshot ... not show the content of chart element? ...
    (microsoft.public.access.reports)