So I was bored today, tinkering while on a conference call. (ADHD I tell you) I was messing around with Peach (fuzzer), ComRaider and WinDBG… Created a PoC demonstration of register control (ecx, ebc, eip) on Google Earth. Remember, the goal is to (dis)affect EIP in the longrun thereby obtaining control of EIP in some shape form or fashion.
Wish I had time for tinkering, some days. My days, this week, were spent fixing issues with a customer’s s390x (zSeries) guests, cuz they have issues with broken patching (security specific, and all,) and was busy diving through gdb and debugging.
Gonna have to make time to experiment and see what you did, in more detail, next week or so, if I’m lucky enough…
I was about to give you a hard time for not throwing in some of your custom mixes, but then *BAM*, right at 11 seconds 😉
That’s cool stuff. It’s unfortunately over my head at the moment, but it’s great that you keep putting out stuff like this. I’ve just caught up on the articles you’ve put out over the past few months as well. Keep it up dude; it’s much appreciated!