jetlib.sec » Tags » mark-dowd

Feeds

133363 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

12 items tagged "mark dowd"

Related tags: alexander sotirov [+], black hat [+], usa [+], memory technique [+], memory protection [+], memory [+], how to impress girls [+], browser [+], overflow [+], mpeg layer 3 [+], mpeg [+], microsoft mpeg [+], microsoft [+], code [+], avi [+], text segment [+], net [+], neel mehta [+], module [+], memory segment [+], authors [+], video [+], tags [+], science [+], privilege [+], paper [+], neel [+], mehta [+], malaysia [+], john mcdonald [+], interoperability [+], impress [+], hack in the box [+], event [+], escalation [+], c applications [+], auditing [+], audio [+], attacking [+], alex wheeler [+]

• January 15, 2012
• 21:31

  [Slides] The Science of Code Auditing

   » ‎ SecDocs
  Authors: Alex Wheeler Mark Dowd Neel Mehta
  Tags: code auditing
  Event: Black Hat EU 2006
  

  Tags:  auditing science code neel-mehta mark-dowd alex-wheeler black-hat neel mehta  

• August 13, 2011
• 13:19

  MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a buffer overflow in l3codecx.ax while processing a AVI files with MPEG Layer-3 audio contents. The overflow only allows to overwrite with 0's so the three least significant bytes of EIP saved on stack are overwritten and shellcode is mapped using the .NET DLL memory technique pioneered by Alexander Sotirov and Mark Dowd. Please note on IE 8 targets, your malicious URL must be a trusted site in order to load the .Net control.

  Tags:  microsoft mpeg overflow avi alexander-sotirov mark-dowd mpeg-layer-3 microsoft-mpeg memory-technique  

• 13:19

  MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a buffer overflow in l3codecx.ax while processing a AVI files with MPEG Layer-3 audio contents. The overflow only allows to overwrite with 0's so the three least significant bytes of EIP saved on stack are overwritten and shellcode is mapped using the .NET DLL memory technique pioneered by Alexander Sotirov and Mark Dowd. Please note on IE 8 targets, your malicious URL must be a trusted site in order to load the .Net control.

  Tags:  microsoft mpeg overflow avi alexander-sotirov mark-dowd mpeg-layer-3 microsoft-mpeg memory-technique  

• 13:19

  MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a buffer overflow in l3codecx.ax while processing a AVI files with MPEG Layer-3 audio contents. The overflow only allows to overwrite with 0's so the three least significant bytes of EIP saved on stack are overwritten and shellcode is mapped using the .NET DLL memory technique pioneered by Alexander Sotirov and Mark Dowd. Please note on IE 8 targets, your malicious URL must be a trusted site in order to load the .Net control.

  Tags:  microsoft mpeg overflow avi alexander-sotirov mark-dowd mpeg-layer-3 microsoft-mpeg memory-technique  

• May 02, 2011
• 11:35

  [Slides] Breaking C++ Applications

   » ‎ SecDocs
  Authors: John McDonald Mark Dowd Neel Mehta
  Tags: C / C++ exploiting
  Event: Black Hat USA 2007
  

  Tags:  authors event tags john-mcdonald neel-mehta mark-dowd usa c-applications black-hat  

• September 10, 2010
• 21:07

  [Slides] Attacking Interoperability

   » ‎ SecDocs
  Authors: Mark Dowd
  Tags: exploiting privilege escalation
  Event: Hack In The Box 2009 Malaysia
  

  Tags:  attacking authors interoperability mark-dowd malaysia hack-in-the-box escalation privilege  

• August 01, 2010
• 21:12

  [Video] How To Impress Girls With Browser Memory Protection Bypasses

   » ‎ SecDocs
  Authors: Alexander Sotirov Mark Dowd
  Tags: memory exploiting browser
  Event: Black Hat USA 2008
  

  Tags:  video memory browser alexander-sotirov mark-dowd usa memory-protection how-to-impress-girls black-hat  

• 21:12

  [Slides] How To Impress Girls With Browser Memory Protection Bypasses

   » ‎ SecDocs
  Authors: Alexander Sotirov Mark Dowd
  Tags: memory exploiting browser
  Event: Black Hat USA 2008
  

  Tags:  impress memory browser alexander-sotirov mark-dowd usa memory-protection how-to-impress-girls black-hat  

• July 31, 2010
• 21:11

  [Paper] How To Impress Girls With Browser Memory Protection Bypasses

   » ‎ SecDocs
  Authors: Alexander Sotirov Mark Dowd
  Tags: memory exploiting browser
  Event: Black Hat USA 2008
  

  Tags:  memory browser paper alexander-sotirov mark-dowd usa memory-protection how-to-impress-girls black-hat  

• 21:11

  [Audio] How To Impress Girls With Browser Memory Protection Bypasses

   » ‎ SecDocs
  Authors: Alexander Sotirov Mark Dowd
  Tags: memory exploiting browser
  Event: Black Hat USA 2008
  

  Tags:  audio memory browser alexander-sotirov mark-dowd usa memory-protection how-to-impress-girls black-hat  

• February 11, 2010
• 17:00

  ms08_078_xml_corruption.rb.txt

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a vulnerability in the data binding feature of Internet Explorer. In order to execute code reliably, this module uses the .NET DLL memory technique pioneered by Alexander Sotirov and Mark Dowd. This method is used to create a fake vtable at a known location with all methods pointing to our payload. Since the .text segment of the .NET DLL is non-writable, a prefixed code stub is used to copy the payload into a new memory segment and continue execution from there.

  Tags:  code net module alexander-sotirov mark-dowd memory-segment memory-technique text-segment  

• 17:00

  ms08_078_xml_corruption.rb.txt

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a vulnerability in the data binding feature of Internet Explorer. In order to execute code reliably, this module uses the .NET DLL memory technique pioneered by Alexander Sotirov and Mark Dowd. This method is used to create a fake vtable at a known location with all methods pointing to our payload. Since the .text segment of the .NET DLL is non-writable, a prefixed code stub is used to copy the payload into a new memory segment and continue execution from there.

  Tags:  code net module alexander-sotirov mark-dowd memory-segment memory-technique text-segment