28 May 2009
21 May 2009
15 May 2009
What do we have?
What do we have?: "So... we look at how other programs get their addresses. We want to be able to use internet functions to do fun stuff with our exploit code, so we are going to need to use WSOCK32.DLL or WININET.DLL. WinInet provides more functionality with less code, so we'll go with that for now. WININET is not loaded into the process space of RUNDLL32, so we'd have to load it. But wait! We haven't mentioned how to gain control of the EIP and point it to our code yet! So we shall..."
08 May 2009
07 May 2009
06 May 2009
05 May 2009
04 May 2009
Subscribe to:
Posts (Atom)
