Win32 Buffer Overflows (Location, Exploitation and Prevention)


Published: Apr 08, 2000 Updated: Apr 08, 2000 Section: Network Security Library :: Auditing Author: Printable Version Adjust font size: Rating: 3/5 - 2 Votes 1 2 3 4 5

This paper will be separated into 3 sections. The first will cover a standard reversing session, and we'll point out a common vulnerability. The second will demonstrate the process of exploiting the weakness - the problem with most win32 remote overflow exploits stems from the payload, the current trend is to have the shellcode download an external file and execute. The last section will show how to add your own code to the executables of your target to prevent exploitation.

Click Here to download this article