DEP/ASLR/ Bypass POC

Discussion in 'other security issues & news' started by CloneRanger, Jul 2, 2012.

Thread Status:
Not open for further replies.
  1. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,978
    Not having MS i can't test it, but some of you could ;)
     
    Last edited by a moderator: Jul 2, 2012
    CloneRanger, Jul 2, 2012
    #1
  2. Hungry Man

    Hungry Man Registered Member

    Joined:
    May 11, 2011
    Posts:
    9,146
    That's why you need PIE.
     
    Hungry Man, Jul 2, 2012
    #2
  3. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,978
    Yeah i know that :p
     
    CloneRanger, Jul 2, 2012
    #3
  4. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,295
    Am I losing my marbles ? ...with the acronyms. ;)


    o_O

    MS - Mail Server

    PIE - Propagation, Infection, Execution
     
    Tarnak, Jul 2, 2012
    #4
  5. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,978
    :D No ;)

    In the context of the post.

    MS = MetaSploit

    PIE = Poison Ivy Exploit
     
    CloneRanger, Jul 2, 2012
    #5
  6. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,295

    Now, it is all clear :D ...I think it is time for me to exit from this thread, as this field is technically beyond my comprehension. ;)
     
    Tarnak, Jul 2, 2012
    #6
  7. Hungry Man

    Hungry Man Registered Member

    Joined:
    May 11, 2011
    Posts:
    9,146
    PIE = Position Independent Executables

    Sorry, that was unclear lol
     
    Hungry Man, Jul 2, 2012
    #7
  8. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,295
    :D ... Now, I really know I am out of my depth.
     
    Tarnak, Jul 2, 2012
    #8
  9. Hungry Man

    Hungry Man Registered Member

    Joined:
    May 11, 2011
    Posts:
    9,146
    https://en.wikipedia.org/wiki/Position-independent_code

     
    Hungry Man, Jul 2, 2012
    #9
  10. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,295
    I guess one has to be a programmer/developer, to understand.;)
     
    Tarnak, Jul 2, 2012
    #10
  11. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,978
    Because the arcticle is about PIE = Poison Ivy Exploit it's natural to assume you meant that !

    PIE = Position Independent Executables Yeah, clear as MudPIE now :D
     
    CloneRanger, Jul 3, 2012
    #11
  12. chronomatic

    chronomatic Registered Member

    Joined:
    Apr 9, 2009
    Posts:
    1,343
    Windows XP does not have ASLR.
     
    chronomatic, Jul 9, 2012
    #12
  13. Hungry Man

    Hungry Man Registered Member

    Joined:
    May 11, 2011
    Posts:
    9,146
    One would have to be infected to do this. It's pretty cool.
     
    Hungry Man, Jul 9, 2012
    #13
  14. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,978
    Quite right :thumb: But it does have DEP, up to a point ;)
     
    CloneRanger, Jul 9, 2012
    #14
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...