jetlib.sec » Tags » alexander-sotirov

Feeds

133337 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

16 items tagged "alexander sotirov"

Related tags: mark dowd [+], black hat [+], usa [+], memory technique [+], module [+], memory protection [+], memory [+], javascript [+], how to impress girls [+], heap [+], feng shui [+], browser [+], paper [+], overflow [+], mpeg layer 3 [+], mpeg [+], microsoft mpeg [+], microsoft [+], avi [+], vulnerability [+], user32 dll [+], user [+], unc path [+], text segment [+], net [+], memory segment [+], hat europe [+], europe [+], code [+], buffer overflow vulnerability [+], authors [+], ani [+], video [+], third [+], slides [+], rise [+], party patches [+], impress [+], hotpatching [+], audio [+]

• January 10, 2012
• 21:40

  [Slides] Hotpatching and the Rise of Third-Party Patches

   » ‎ SecDocs
  Authors: Alexander Sotirov
  Tags: reverse engineering
  Event: Black Hat USA 2006
  

  Tags:  rise third hotpatching alexander-sotirov usa party-patches black-hat slides  

• August 13, 2011
• 13:19

  MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a buffer overflow in l3codecx.ax while processing a AVI files with MPEG Layer-3 audio contents. The overflow only allows to overwrite with 0's so the three least significant bytes of EIP saved on stack are overwritten and shellcode is mapped using the .NET DLL memory technique pioneered by Alexander Sotirov and Mark Dowd. Please note on IE 8 targets, your malicious URL must be a trusted site in order to load the .Net control.

  Tags:  microsoft mpeg overflow avi alexander-sotirov mark-dowd mpeg-layer-3 microsoft-mpeg memory-technique  

• 13:19

  MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a buffer overflow in l3codecx.ax while processing a AVI files with MPEG Layer-3 audio contents. The overflow only allows to overwrite with 0's so the three least significant bytes of EIP saved on stack are overwritten and shellcode is mapped using the .NET DLL memory technique pioneered by Alexander Sotirov and Mark Dowd. Please note on IE 8 targets, your malicious URL must be a trusted site in order to load the .Net control.

  Tags:  microsoft mpeg overflow avi alexander-sotirov mark-dowd mpeg-layer-3 microsoft-mpeg memory-technique  

• 13:19

  MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a buffer overflow in l3codecx.ax while processing a AVI files with MPEG Layer-3 audio contents. The overflow only allows to overwrite with 0's so the three least significant bytes of EIP saved on stack are overwritten and shellcode is mapped using the .NET DLL memory technique pioneered by Alexander Sotirov and Mark Dowd. Please note on IE 8 targets, your malicious URL must be a trusted site in order to load the .Net control.

  Tags:  microsoft mpeg overflow avi alexander-sotirov mark-dowd mpeg-layer-3 microsoft-mpeg memory-technique  

• July 20, 2011
• 15:04

  [Paper] Heap Feng Shui in JavaScript

   » ‎ SecDocs
  Authors: Alexander Sotirov
  Tags: Javascript
  Event: Black Hat Europe 2007
  

  Tags:  javascript heap paper alexander-sotirov feng-shui europe hat-europe black-hat  

• 14:58

  [Slides] Heap Feng Shui in JavaScript

   » ‎ SecDocs
  Authors: Alexander Sotirov
  Tags: Javascript
  Event: Black Hat Europe 2007
  

  Tags:  javascript authors heap alexander-sotirov feng-shui europe hat-europe black-hat  

• June 19, 2011
• 14:24

  [Paper] Heap Feng Shui in JavaScript

   » ‎ SecDocs
  Authors: Alexander Sotirov
  Tags: browser Javascript
  Event: Black Hat USA 2007
  

  Tags:  javascript heap paper alexander-sotirov feng-shui usa black-hat  

• 14:23

  [Slides] Heap Feng Shui in JavaScript

   » ‎ SecDocs
  Authors: Alexander Sotirov
  Tags: browser Javascript
  Event: Black Hat USA 2007
  

  Tags:  javascript authors heap alexander-sotirov feng-shui usa black-hat  

• August 01, 2010
• 21:12

  [Video] How To Impress Girls With Browser Memory Protection Bypasses

   » ‎ SecDocs
  Authors: Alexander Sotirov Mark Dowd
  Tags: memory exploiting browser
  Event: Black Hat USA 2008
  

  Tags:  video memory browser alexander-sotirov mark-dowd usa memory-protection how-to-impress-girls black-hat  

• 21:12

  [Slides] How To Impress Girls With Browser Memory Protection Bypasses

   » ‎ SecDocs
  Authors: Alexander Sotirov Mark Dowd
  Tags: memory exploiting browser
  Event: Black Hat USA 2008
  

  Tags:  impress memory browser alexander-sotirov mark-dowd usa memory-protection how-to-impress-girls black-hat  

• July 31, 2010
• 21:11

  [Paper] How To Impress Girls With Browser Memory Protection Bypasses

   » ‎ SecDocs
  Authors: Alexander Sotirov Mark Dowd
  Tags: memory exploiting browser
  Event: Black Hat USA 2008
  

  Tags:  memory browser paper alexander-sotirov mark-dowd usa memory-protection how-to-impress-girls black-hat  

• 21:11

  [Audio] How To Impress Girls With Browser Memory Protection Bypasses

   » ‎ SecDocs
  Authors: Alexander Sotirov Mark Dowd
  Tags: memory exploiting browser
  Event: Black Hat USA 2008
  

  Tags:  audio memory browser alexander-sotirov mark-dowd usa memory-protection how-to-impress-girls black-hat  

• April 15, 2010
• 16:00

  ms07_017_ani_loadimage_chunksize.rb.txt

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a buffer overflow vulnerability in the LoadAniIcon() function in USER32.dll. The flaw can be triggered through Internet Explorer 6 and 7 by using the CURSOR style sheet directive to load a malicious .ANI file. The module can also exploit Mozilla Firefox by using a UNC path in a moz-icon URL and serving the .ANI file over WebDAV. The vulnerable code in USER32.dll will catch any exceptions that occur while the invalid cursor is loaded, causing the exploit to silently fail when the wrong target has been chosen. This vulnerability was discovered by Alexander Sotirov of Determina and was rediscovered, in the wild, by McAfee.

  Tags:  user vulnerability module alexander-sotirov ani buffer-overflow-vulnerability unc-path user32-dll  

• 16:00

  ms07_017_ani_loadimage_chunksize.rb.txt

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a buffer overflow vulnerability in the LoadAniIcon() function in USER32.dll. The flaw can be triggered through Internet Explorer 6 and 7 by using the CURSOR style sheet directive to load a malicious .ANI file. The module can also exploit Mozilla Firefox by using a UNC path in a moz-icon URL and serving the .ANI file over WebDAV. The vulnerable code in USER32.dll will catch any exceptions that occur while the invalid cursor is loaded, causing the exploit to silently fail when the wrong target has been chosen. This vulnerability was discovered by Alexander Sotirov of Determina and was rediscovered, in the wild, by McAfee.

  Tags:  user vulnerability module alexander-sotirov ani buffer-overflow-vulnerability unc-path user32-dll  

• February 11, 2010
• 17:00

  ms08_078_xml_corruption.rb.txt

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a vulnerability in the data binding feature of Internet Explorer. In order to execute code reliably, this module uses the .NET DLL memory technique pioneered by Alexander Sotirov and Mark Dowd. This method is used to create a fake vtable at a known location with all methods pointing to our payload. Since the .text segment of the .NET DLL is non-writable, a prefixed code stub is used to copy the payload into a new memory segment and continue execution from there.

  Tags:  code net module alexander-sotirov mark-dowd memory-segment memory-technique text-segment  

• 17:00

  ms08_078_xml_corruption.rb.txt

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a vulnerability in the data binding feature of Internet Explorer. In order to execute code reliably, this module uses the .NET DLL memory technique pioneered by Alexander Sotirov and Mark Dowd. This method is used to create a fake vtable at a known location with all methods pointing to our payload. Since the .text segment of the .NET DLL is non-writable, a prefixed code stub is used to copy the payload into a new memory segment and continue execution from there.

  Tags:  code net module alexander-sotirov mark-dowd memory-segment memory-technique text-segment