H e s s a m x ! http://vuln.wordpress.com Thu, 07 Dec 2006 15:17:06 +0000 http://wordpress.org/?v=MU en BOF exploit in the Alpha Linux http://vuln.wordpress.com/2006/12/07/bof-exploit-in-the-alpha-linux/ http://vuln.wordpress.com/2006/12/07/bof-exploit-in-the-alpha-linux/#comments Thu, 07 Dec 2006 15:12:56 +0000 hessamx http://vuln.wordpress.com/2006/12/07/bof-exploit-in-the-alpha-linux/

There are many exploit code of buffer overflow. However, almost all codes works well only in the intel x86 linux. This paper will attempt to explain how you exploit same bug in the alpha linux. Read this paper in securiteam.com

]]> http://vuln.wordpress.com/2006/12/07/bof-exploit-in-the-alpha-linux/feed/ Advanced malloc exploits http://vuln.wordpress.com/2006/12/07/advanced-malloc-exploits/ http://vuln.wordpress.com/2006/12/07/advanced-malloc-exploits/#comments Thu, 07 Dec 2006 15:05:12 +0000 hessamx http://vuln.wordpress.com/2006/12/07/advanced-malloc-exploits/

This article explains what several techniques that allow more generic and reliable exploitation of processes that provide us with the ability to overwrite an almost arbitrary 4 byte value at any location.
read this paper in Phrack.org

]]> http://vuln.wordpress.com/2006/12/07/advanced-malloc-exploits/feed/ Microsoft Anti-Cross site scripting Library http://vuln.wordpress.com/2006/12/07/microsoft-anti-cross-site-scripting-library/ http://vuln.wordpress.com/2006/12/07/microsoft-anti-cross-site-scripting-library/#comments Thu, 07 Dec 2006 13:54:38 +0000 hessamx http://vuln.wordpress.com/2006/12/07/microsoft-anti-cross-site-scripting-library/

Cross-site scripting (XSS) attacks exploit vulnerabilities in Web-based applications that fail to properly validate and/or encode input that is embedded in response data. Malicious users can then inject client-side script into response data causing the unsuspecting user’s browser to execute the script code. The script code will appear to have originated from a trusted-site and may be able to bypass browser protection mechanisms such as security zones. See This Library in microsoft.

]]> http://vuln.wordpress.com/2006/12/07/microsoft-anti-cross-site-scripting-library/feed/ Exploiting with linux-gate.so.1 http://vuln.wordpress.com/2006/12/07/exploiting-with-linux-gateso1/ http://vuln.wordpress.com/2006/12/07/exploiting-with-linux-gateso1/#comments Thu, 07 Dec 2006 13:32:28 +0000 hessamx http://vuln.wordpress.com/2006/12/07/exploiting-with-linux-gateso1/

linux-gate.so.1 not a dynamically loaded library but a dynamically shared object (DSO).This article explains what linux-gate.so.1 how it can be useful for exploits and can byppasing some protections.this is pretty good for Buffer Overflow Exploits.
you can read this paper here.

]]> http://vuln.wordpress.com/2006/12/07/exploiting-with-linux-gateso1/feed/ return-into-libc Papers http://vuln.wordpress.com/2006/12/07/return-into-libc-papers/ http://vuln.wordpress.com/2006/12/07/return-into-libc-papers/#comments Thu, 07 Dec 2006 13:24:05 +0000 hessamx http://vuln.wordpress.com/2006/12/07/return-into-libc-papers/

return-into-libc is very useful method for exploiting .this is a method of exploiting a buffer overflow on a system that has a non-executable stack (like linux).

The advanced return-into-lib(c) exploits
Exploitation - returning into libc
c0ntex - return to libc 

]]> http://vuln.wordpress.com/2006/12/07/return-into-libc-papers/feed/