<?xml version="1.0" encoding="utf-8" ?>

<rss version="2.0" 
   xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
   xmlns:admin="http://webns.net/mvcb/"
   xmlns:dc="http://purl.org/dc/elements/1.1/"
   xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
   xmlns:wfw="http://wellformedweb.org/CommentAPI/"
   xmlns:content="http://purl.org/rss/1.0/modules/content/"
   >
<channel>
    <title>forkb0mb.org - Format String</title>
    <link>http://forkb0mb.org/content/</link>
    <description>Still Watching Bits in a Terabyte World</description>
    <dc:language>en</dc:language>
    <generator>Serendipity 1.4.1 - http://www.s9y.org/</generator>
    
    

<item>
    <title>Wikipedia Articles in Regards to Various Types of Exploits</title>
    <link>http://forkb0mb.org/content/index.php?/archives/265-Wikipedia-Articles-in-Regards-to-Various-Types-of-Exploits.html</link>
            <category>Assembly</category>
            <category>Buffer Overflow</category>
            <category>C</category>
            <category>Development</category>
            <category>Exploits</category>
            <category>Firewall</category>
            <category>Format String</category>
            <category>IDS/IPS</category>
            <category>Networking</category>
            <category>Network Security</category>
            <category>Operating Systems</category>
            <category>Programming</category>
            <category>Race Conditions</category>
            <category>SQL Injection</category>
            <category>Systems Security</category>
            <category>Vulnerabilities</category>
            <category>XSS</category>
    
    <comments>http://forkb0mb.org/content/index.php?/archives/265-Wikipedia-Articles-in-Regards-to-Various-Types-of-Exploits.html#comments</comments>
    <wfw:comment>http://forkb0mb.org/content/wfwcomment.php?cid=265</wfw:comment>

    <slash:comments>0</slash:comments>
    <wfw:commentRss>http://forkb0mb.org/content/rss.php?version=2.0&amp;type=comments&amp;cid=265</wfw:commentRss>
    

    <author>nospam@example.com (TJE)</author>
    <content:encoded>
    &lt;strong&gt;Wikipedia Articles in Regards to Various Types of Exploits&lt;/strong&gt;&lt;br /&gt;
&lt;br /&gt;
/*&lt;br /&gt;
First, there is the Wiki page detailing exactly what an &lt;a href=&quot;http://en.wikipedia.org/wiki/Exploit_%28computer_science%29&quot;  title=&quot;http://en.wikipedia.org/wiki/Exploit_%28computer_science%29&quot;&gt;exploit&lt;/a&gt; is.  This is a very good read and should acquaint anyone with what an exploit is and can be capable of.&lt;br /&gt;
&lt;br /&gt;
Second, there are Wiki pages detailing several types of exploits and detailed information as to how they work.  Below, you&#039;ll find some great examples of exploits ranging from low-risk web browser information disclosure on up to full system-level compromises.&lt;br /&gt;
&lt;ul&gt;&lt;br /&gt;
&lt;li&gt; &lt;a href=&quot;http://en.wikipedia.org/wiki/Buffer_overflow&quot;  title=&quot;http://en.wikipedia.org/wiki/Buffer_overflow&quot;&gt;Buffer Overflow&lt;/a&gt;&lt;br /&gt;
&lt;li&gt; &lt;a href=&quot;http://en.wikipedia.org/wiki/Heap_overflow&quot;  title=&quot;http://en.wikipedia.org/wiki/Heap_overflow&quot;&gt;Heap Overflow&lt;/a&gt;&lt;br /&gt;
&lt;li&gt; &lt;a href=&quot;http://en.wikipedia.org/wiki/Stack_buffer_overflow&quot;  title=&quot;http://en.wikipedia.org/wiki/Stack_buffer_overflow&quot;&gt;Stack Buffer Overflow&lt;/a&gt;&lt;br /&gt;
&lt;li&gt; &lt;a href=&quot;http://en.wikipedia.org/wiki/Integer_overflow&quot;  title=&quot;http://en.wikipedia.org/wiki/Integer_overflow&quot;&gt;Integer Overflow&lt;/a&gt;&lt;br /&gt;
&lt;li&gt; &lt;a href=&quot;http://en.wikipedia.org/wiki/Return-to-libc_attack&quot;  title=&quot;http://en.wikipedia.org/wiki/Return-to-libc_attack&quot;&gt;Return-to-libc Attack&lt;/a&gt;&lt;br /&gt;
&lt;li&gt; &lt;a href=&quot;http://en.wikipedia.org/wiki/Format_string_attack&quot;  title=&quot;http://en.wikipedia.org/wiki/Format_string_attack&quot;&gt;Format String Attack&lt;/a&gt;&lt;br /&gt;
&lt;li&gt; &lt;a href=&quot;http://en.wikipedia.org/wiki/Race_condition&quot;  title=&quot;http://en.wikipedia.org/wiki/Race_condition&quot;&gt;Race Condition&lt;/a&gt;&lt;br /&gt;
&lt;li&gt; &lt;a href=&quot;http://en.wikipedia.org/wiki/Code_injection&quot;  title=&quot;http://en.wikipedia.org/wiki/Code_injection&quot;&gt;Code Injection&lt;/a&gt;&lt;br /&gt;
&lt;li&gt; &lt;a href=&quot;http://en.wikipedia.org/wiki/SQL_injection&quot;  title=&quot;http://en.wikipedia.org/wiki/SQL_injection&quot;&gt;SQL Injection&lt;/a&gt;&lt;br /&gt;
&lt;li&gt; &lt;a href=&quot;http://en.wikipedia.org/wiki/Cross-site_scripting&quot;  title=&quot;http://en.wikipedia.org/wiki/Cross-site_scripting&quot;&gt;Cross-Site Scripting&lt;/a&gt; (XSS)&lt;br /&gt;
&lt;li&gt; &lt;a href=&quot;http://en.wikipedia.org/wiki/Cross-site_request_forgery&quot;  title=&quot;http://en.wikipedia.org/wiki/Cross-site_request_forgery&quot;&gt;Cross-Site Request Forgery&lt;/a&gt; (CSRF)&lt;br /&gt;
&lt;/ul&gt;&lt;br /&gt;
Some of these methods were even new to me.  The Sea-Surf (CSRF - Cross-Site Request Forgery) method is something I had at least considered as possible, but I had no idea that the method had a name and was actively in use in-the-wild.&lt;br /&gt;
&lt;br /&gt;
Some of these methods require some social engineering to trick the end-user (target) into activating the payload; whereas others require no interaction by the target, and they are often unaware that they have been or are being compromised.&lt;br /&gt;
&lt;br /&gt;
There are many other interesting documents covering everything from &lt;a href=&quot;http://en.wikipedia.org/wiki/Shellcode&quot;  title=&quot;http://en.wikipedia.org/wiki/Shellcode&quot;&gt;shellcode&lt;/a&gt; to &lt;a href=&quot;http://en.wikipedia.org/wiki/Polymorphic_code&quot;  title=&quot;http://en.wikipedia.org/wiki/Polymorphic_code&quot;&gt;polymorphic code&lt;/a&gt; to a &lt;a href=&quot;http://en.wikipedia.org/wiki/NOP&quot;  title=&quot;http://en.wikipedia.org/wiki/NOP&quot;&gt;NOP&lt;/a&gt; (Null OPeration) to &lt;a href=&quot;http://en.wikipedia.org/wiki/NOP_slide&quot;  title=&quot;http://en.wikipedia.org/wiki/NOP_slide&quot;&gt;NOP Sleds&lt;/a&gt;.&lt;br /&gt;
&lt;br /&gt;
Happy hacking!&lt;br /&gt;
*/ 
    </content:encoded>

    <pubDate>Sun, 13 Jan 2008 00:19:56 -0500</pubDate>
    <guid isPermaLink="false">http://forkb0mb.org/content/index.php?/archives/265-guid.html</guid>
    
</item>

</channel>
</rss>