Need help analyzing apache-scalp code

From: Martin Walker (Martin.Walker@ctg.com)
Date: 09/27/02 

Date: Fri, 27 Sep 2002 10:31:08 -0400
From: "Martin Walker" <Martin.Walker@ctg.com>
To: <vuln-dev@securityfocus.com>

All,

I'm writing a paper on the apache-scalp/apache chunk encoded
vulnerability

I havn't written a line of code in years (well, 'cept the odd script
whipped up now and again)

Can anyone give me a little help understanding the code off line?

Thanks

---------------------------------------
Martin C. Walker, GCIA, CISSP
Sr. e-Security Consultant
CTG HealthCare Solutions, Inc.
V/M: (800) 992-5350 x5141
Email: martin.walker@ctg.com
Efax: (801) 981-6754

Relevant Pages

  • Re: Re: Re: Re: HTTP traffic
    ... What do you mean by creative in writing exploit specific filter? ... In response to your query about not being able to understand "to have a signature or rule which will create a region where other vulnerability specific rules can operate " ... You have mentioned some thing about file format decoder. ... filters:) If we just look for AAAA, it will be hard to survive in the ...
    (Focus-IDS)
  • Re: Detecting vulnerabilities to write exploits
    ... > This is something very basic to start with the exploit writing. ... > How do you detect the vulnerability to write a exploit for this? ... education and the case study affords you unmatched consulting experience. ... Computer Emergency Response Teams, and Digital Investigations. ...
    (Security-Basics)
  • Detecting vulnerabilities to write exploits
    ... This is something very basic to start with the exploit writing. ... Basically i want to know that how do u find in any code of program that there is buffer overflow or any other kind of vulnerability existing? ... education and the case study affords you unmatched consulting experience. ... Computer Emergency Response Teams, and Digital Investigations. ...
    (Security-Basics)
  • Re: Openssl proof of concept code?
    ... Nessus' ssltest.nasl can allegedly distinguish ... The best way to determine if a system is vulnerable to a given vulnerability ... Writing a good-enough vulnerability check without explotation is sometimes ... of stack overflows due to infinite recursion on windows or linux systems? ...
    (Pen-Test)