Comments on: Internet Exploiter 2 – bypassing DEP

By: 0-day exploits for IE flaw another reason to switch to IE8 « Web Designing

0-day exploits for IE flaw another reason to switch to IE8 « Web Designing — Fri, 12 Mar 2010 05:08:59 +0000

[...] as the current exploits do not circumvent DEP (though they could probably be combined with DEP bypass techniques). Removing access to the file iepeers.dll using either of the mechanisms described in [...]

By: » ¿Es vulnerable el sistema DEP? NoticiasTech

» ¿Es vulnerable el sistema DEP? NoticiasTech — Sat, 06 Mar 2010 12:08:19 +0000

[...] al código publicado de un ingeniero de seguridad Google. El ingeniero, que va con el sobrenombre de Skypher, claramente aclara en su página que el propósito de su muestra es destacar a la comunidad de [...]

By: DEP in Windows hacked « Robby Pedrica’s Tech Blog

DEP in Windows hacked « Robby Pedrica’s Tech Blog — Fri, 05 Mar 2010 13:23:09 +0000

[...] at where vulnerable memory that could be used to execute unapproved programs could be found. In Wever’s latest trick, the attacking code looks for clues on where to find memory that’s allowed by DEP to run [...]

By: InfoSec Daily » Episode 80 – Don’t “Stire” Me

InfoSec Daily » Episode 80 – Don’t “Stire” Me — Thu, 04 Mar 2010 23:57:11 +0000

[...] News item 5: http://skypher.com/index.php/2010/03/01/internet-exploiter-2-dep/ [...]

By: Nova técnica de ataque burla a maior defesa do Windows « SECNOW – Web Security Analysis and Threads

Thu, 04 Mar 2010 23:21:39 +0000

[...] “Estou lançando isso porque acho que pode ajudar a explicar porque ASLR + DEP não são uma forma de mitigação que ofereça confiança suficiente, especialmente em plataformas x86″, diz Wever em um post de seu blog pessoal. [...]

By: Is Windows Now Doomed To A New Round Of Attacks? | Revelations From An Unwashed Brain

Thu, 04 Mar 2010 06:43:17 +0000

[...] mitigation to put a lot of faith in, especially on x86 platforms," said Wever in a post to his personal blog on Monday.Wever should know about Windows: According to his LinkedIn profile, he worked for [...]

By: New exploit technique nullifies major Windows defense «

New exploit technique nullifies major Windows defense « — Wed, 03 Mar 2010 21:35:28 +0000

[...] to put a lot of faith in, especially on x86 platforms,” said Wever in a post to his personal blog on [...]

By: Googler ships exploit to defeat DEP | Zero Day | ZDNet.com

Googler ships exploit to defeat DEP | Zero Day | ZDNet.com — Wed, 03 Mar 2010 19:48:48 +0000

[...] why ASLR+DEP are not a mitigation to put a lot of faith in, especially on x86 platforms,” SkyLined wrote on his blog. ”32-bits does not provide sufficient address space to randomize memory to the point where [...]

By: thomas

thomas — Tue, 02 Mar 2010 10:34:42 +0000

Could you make it work with recent Aurora exploit? It would be a good challenge for you and to prove that it’s better than Immunity’s JIT method

By: Skypher · Internet Exploiter 2 – bypassing DEP « Internet Cafe Solution

Skypher · Internet Exploiter 2 – bypassing DEP « Internet Cafe Solution — Tue, 02 Mar 2010 08:57:15 +0000

[...] Read the rest here: Skypher · Internet Exploiter 2 – bypassing DEP [...]