Results 1 to 7 of 7

Thread: exploiting buffer overflow??

  1. April 10th, 2002, 07:58 PM #1
    theeta
    theeta is offline
    Junior Member
    Join Date
    Feb 2002
    Posts
    10

    exploiting buffer overflow??

    Hi there.........i have found a buffer overflow situation in a windows baesed mail daemon........and i want to exploit it to run arbitrary commands..........i have decided to test it on my local machine so as to execute notepad.exe ............now the problem being that i couldn't successfully code the exploit for this....:-(...........i was trying CreateProcessA to run notepd.exe............i examined this API and found that it pushes 10 parameters before going in for a call............i tried maually adding code in debugger , but the call CreateProcessA doesn't give any results........
    so can anyone guide me about how to achieve this ( about createproces API).......or is there any other API/method by which i can achieve it????

    Thnx in advance.
    theeta.
    Reply With Quote Reply With Quote
  2. April 11th, 2002, 09:47 PM #2
    theeta
    theeta is offline
    Junior Member
    Join Date
    Feb 2002
    Posts
    10
    Okay ......lemme rephrase my question..........

    How can i run a process on a system (WinExec?? ) .........

    anyone???

    theeta.
    Reply With Quote Reply With Quote
  3. April 11th, 2002, 09:55 PM #3
    xmaddness
    xmaddness is offline
    Webius Designerous Indiginous
    Join Date
    Mar 2002
    Location
    South Florida
    Posts
    1,123
    i smell something funny....

    /me howls
    Reply With Quote Reply With Quote
  4. April 11th, 2002, 10:07 PM #4
    theeta
    theeta is offline
    Junior Member
    Join Date
    Feb 2002
    Posts
    10
    hehe.........i meant how exactly to use WinExec API...........

    it requires two parameters to be PUSHed........i tried it a lot but no avail.....
    so is there any "exploit coder" who can help me out of this???

    theeta.
    Reply With Quote Reply With Quote
  6. April 11th, 2002, 10:09 PM #5
    KorpDeath
    KorpDeath is offline
    Priapistic Monk KorpDeath's Avatar
    Join Date
    Dec 2001
    Posts
    2,628
    Probably not at a security site, but keep trying. You never know.
    Mankind have a great aversion to intellectual labor; but even supposing knowledge to be easily attainable, more people would be content to be ignorant than would take even a little trouble to acquire it.
    - Samuel Johnson
    Reply With Quote Reply With Quote
  7. April 12th, 2002, 08:54 PM #6
    theeta
    theeta is offline
    Junior Member
    Join Date
    Feb 2002
    Posts
    10
    hmmmmm.............antipoints for this thread???????
    heh..........i don't give a damn.........
    FYI i worked it out ( the WinExec thing. )...........actually the API is as following......

    UINT WinExec(

    LPCSTR lpCmdLine, // address of command line
    UINT uCmdShow // window style for new application
    );
    ......and the command line which i was passing wasn't null terminated...:-D.........that's why it wasn't running.......
    thank u all for not being of much help.......which pushed me to figure it out myself ,, and yeah, i learnt a lot.....as far as -ive antipoints are concerned i think i have guessed who is it.. ( acid???)....

    bye
    theeta.
    Reply With Quote Reply With Quote
  8. April 13th, 2002, 12:19 AM #7
    Maverick811
    Maverick811 is offline
    Top Gun Maverick811's Avatar
    Join Date
    Oct 2001
    Posts
    853
    <sarcasm> Wow, that's great - I'm so impressed. </sarcasm>
    - Maverick
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules