raygun Posted September 21, 2012 Share Posted September 21, 2012 https://www.corelan.be/index.php/2011/12/31/exploit-writing-tutorial-part-11-heap-spraying-demystified/ http://blog.chron.com/techblog/2012/09/best-defense-against-latest-unpatched-internet-explorer-flaw-use-another-browser/ http://www.crn.com/news/security/240007660/microsoft-issues-temporary-patch-for-ie-zero-day-threat-permanent-patch-scheduled-for-friday.htm Trust NOTHING (verify everything). Given the nature of the heap spray / ROP chain attack mechanism, NO technology exists at present for either mitigation nor peace of mind with respect to the threat. Link to comment Share on other sites More sharing options...
raygun Posted September 21, 2012 Author Share Posted September 21, 2012 Heap spaying the IE with ROP NOP: http://www.greyhathacker.net/?p=549 Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now