View RSS Feed

Uncategorized

Entries with no category

  1. "vinnu"'s Avatar

    Windows 8 DEP bypass

    by
    "vinnu"
    , 11-18-2011 at 08:11 AM
    [ Taken from Forum posts and edited ]

    Namaste

    This Time we'll colour our hands with the blood of windows 8 Developer's Preview edition. What we need , a target application, a vulnerability, and a debugger, and though notepad + calc also.

    So we have Windows 8 : Developer's Preview Edition
    Firefox : 3.6.16
    Java (JRE) : 6u29

    So what is the difference in windows7 and windows8 exploitation.
    To achieve code execution in win7 ...
    Categories
    ‎ Uncategorized
    Comments 0 Comments
    Read MoreRead More
  3. "vinnu"'s Avatar

    ASLR DEP bypassing techniques

    by
    "vinnu"
    , 09-21-2011 at 11:22 AM
    In defeating DEP you atleast need some information that will evade the ASLR.
    There are mainly two ways:

    1. Any anti ASLR modules gets loaded into the target application. I mean you have the base address of any module at fixed location always even after the system restart.

    2. You get a pointer leak from a memory leak/buffer overflow/any zeroday. In this technique you can adjust the offsets to grab the base address of the module whose pointer gets leaked.
    ...
    Categories
    ‎ Uncategorized
    Comments 4 Comments
    Read MoreRead More