Full Disclosure mailing list archives

Re: dcom exploit code observations

From: Knud Erik Højgaard <kain () ircop dk>
Date: Mon, 28 Jul 2003 22:20:20 +0200

morning_wood wrote:
[snip]

THIS IS NOT THE CASE...
this .bat works perfect...


So somehow running the exploit from a .bat file with some shameless
selfpromotion makes svchost _not_ crash upon hitting a wrong return address?

Would you care to elaborate on how you pull that off?

--
kokanin

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

dcom exploit code observations john (Jul 28)
- Re: dcom exploit code observations Preston Newton (Jul 28)
- Re: dcom exploit code observations morning_wood (Jul 28)
  - Re: dcom exploit code observations Knud Erik Højgaard (Jul 28)
    - Re: dcom exploit code observations Shanphen Dawa (Jul 28)