Wednesday, September 14, 2005

Windows Syscall ShellCode

Paper legal na SecurityFocus:
http://www.securityfocus.com/infocus/1844

Só acho que será um saco tratar cada versao de OS, Service Pack e etc uma vez que os numeros das syscalls mudam. Apesar de a maioria de shellcodes utilizam enderecos hardcoded de funcoes que variam tb a cada SP, lingua e etc.
Bom que essa tecnica bypassa a protecao do VS.NET contra buffer overflows e qualquer outro tipo de checking feito em nivel de API/ring3, uma pena que o XP SP 2 + Data Execution Prevention (DEP) já consegue derrubar esse tecnica uma vez que, se o hardware suportar DEP, mesmo em ring 0 vc nao consegue bypassar a protecao.
DEP vai ser a solução ? Provavelmente não a curto prazo pois todos aplicativos que rodam alguma coisa JIT terão problemas por normalmente rodarem codigos no stack, além dos desenvolvedores terem que passar a se acostumar a marcar a memoria como executavel ou somente leitura quando chamarem a funcao Virtualloc() e utilizar a funcao VirtualProtect().
As empresas deverão passar o seus aplicativos pelo crivo do Application Compatibility Toolkit da MS ou pelo menos instruir o seus usuários a cadastrarem seus aplicativos na sessão de exceptions do DEP. Alias, alguem malicioso pode cadastrar um aplicativo vulneravel e pronto bau bau protecao :-)

8 Comments:

Blogger  said...

wow gold,World Of Warcraft gold,ffxi gil,world of warcraft power leveling wow power leveling,wow gold,World of warcraft power leveling,buy wow gold,wow gold,Cheap WoW Gold,buy world of warcraft gold for cheap Cheap WoW Gold,WoW Gold,world of warcraft gold,WoW Gold,cheap wow gold,cheap wow gold,wow gold
wow gold,wow power leveling.wow power leveling,wow power leveling,world of warcraft gold,world of warcraft gold,wow gold,world of warcraft gold wow gold,wow gold,wow gold,wow gold,wow gold,wow gold,传世私服传世私服, 传奇世界私服传奇世界私服 s2o4s4lh

5:03 AM  
Blogger Unknown said...

toms.com
michael kors watches
michael kors outlet
louis vuitton
abercrombie and fitch
gucci outlet
louis vuitton outlet
jordan shoes
timberland canada
michael kors handbags
cheap air max shoes
louis vuitton bags
ray ban sunglasses
michael kors
abercrombie
ray-ban sunglasses
chaenl bags
ray ban wayfarer
oakley outlet
coach outlet online
louis vuitton
christian louboutin outlet
coach outlet online
prada bags
michael kors purse
jordan retro 3
ralph lauren outlet
jordan 11 snakeskin
michael kors outlet
fendi outlet
hollister kids
michael kors uk
hollister clothing
gucci handbags
michael kors outlet
20150627xiong

7:58 AM  
Blogger John said...

michael kors handbags
michael kors outlet stores
louis vuitton handbags
ugg outlet
coach factory outlet
nike air max
chanel bags
ugg outlet
nike free run
uggs boots
louis vuitton handbags
coach outlet
p90x workouts
coach outlet
michael kors outlet
michael kors outlet
ray ban outlet
michael kors outlet online
north face uk
coach factory outlet
cheap uggs
gucci outlet
swarovski jewelry
uggs clearance
louis vuitton outlet
air max 90
tods outlet
canada goose jackets
canada goose jackets
mont blanc pens
concords 11
toms
20151203yuanyuan

5:20 AM  
Blogger Nike Free said...

jordans 2016
Jordan 5 fire red
coach outlet store online
coach sale
michael kors handbags
Michael Kors Cheap
michael kors handbags outlet
Michael Kors Outlet Store
michael kors bracelet
michael kors jet set tote
michael kors bags
michael kors outlets
Michael Kors Outlet Locations
michael kors uk
cheap jordans
jordan 11
lebron 12
kd 7
nike air max 2015
nike air max 2014
nike free trainer 5.0
nike free 5.0
louboutin outlet
christian louboutin men
discount mbt Shoes
mbt outlet
fitflops shoes
fitflop shoes
Nike Air Huaraches
Huaraches Nike
christian louboutin sale
christian louboutin shoes
jordans shoes

5:07 AM  
Blogger dong dong23 said...

nike air max 90
insanity workout
coach outlet
true religion outlet
kobe bryant shoes
ralph lauren outlet
nike roshe run
louis vuitton
cheap jordans
ray ban sunglasses
burberry outlet
supra sneakers
adidas originals shoes
michael kors handbags
christian louboutin
michael kors outlet online
nike running shoes
designer handbags
oakley sunglasses
coach factory outlet
lebron james shoes
adidas outlet
polo ralph lauren
cheap oakleys
cheap jordans
louis vuitton outlet
coach factory outlet
michael kors outlet
coach outlet
hollister clothing
oakley sunglasses
louis vuitton handbags
replica watches
christian louboutin sale
oakley vault
jordan 3 infrared
mont blanc
toms shoes
adidas nmd
jordan 4
20167.15wengdongdong

7:41 AM  
Blogger dalia alaa said...

https://decor-ksa.com/
https://3kary.com/property-status/apartments-for-sale/
https://3kary.com/property-status/apartments-for-rent/

3:10 PM  
Blogger dalia alaa said...

https://3kary.com/property-status/monthly-apartments-for-rent/
https://3kary.com/property-status/apartments-bachelors/
https://3kary.com/property-status/hotel-appartments/
https://3kary.com/property-type/apartments/

3:11 PM  
Blogger رضاابو مى said...

شركة تنظيف الكنب بالرياض
افضل شركة تنظيف خزانات بالدمام
شركة تنظيف المنازل
افضل شركة تسليك مجارى بالدمام
شركة تنظيف المسابح بالدمام
شركة مكافحة الحشرات بمكة
شركات رش مبيدات بجدة

2:09 AM  

Post a Comment

<< Home