Slashdot Mirror

← Back to Domains

Domain: w00w00.org

Stories and comments across the archive that link to w00w00.org.

Comments · 15

  1. Re:4 bytes IS ENOUGH by Anonymous Coward · · Score: 0 · on Zero Day Exploit Found in Windows Media Player

    As an Introduction to exploiting heap overflow, I'd recommend the following papers:
    An article from heise security and a tutorial by w00w00.

  2. been here before by jordan · · Score: 3, Interesting · on Worm With Rootkit Package Loose On AIM
    we warned them once , we warned them twice .

    silly AOL, will they ever listen?

  3. been here before by jordan · · Score: 3, Interesting · on Worm With Rootkit Package Loose On AIM
    we warned them once , we warned them twice .

    silly AOL, will they ever listen?

  4. Re:Napster and Shawn Fanning by phusnikn · · Score: 1 · on Shawn Fanning's New Venture

    Shawn @ w00w00 Dinner

  5. Re:How does a buffer overflow allow code execution by Yosi · · Score: 1 · on WinXP and WinAmp Vulnerable to Malicious MP3s

    I agree.
    Smashing the Stack for Fun and Profit is certainly a classic.

    Also, if you want to know about more obscure heap based overflows, look at http://www.w00w00.org/files/articles/heaptut.txt

  6. Re:More viri on MS- why? by atropa · · Score: 1 · on Linux Virus Alert

    let's do a quick analysis of the ways to get a virus in MS OSes vs. linux..

    In MS you have a plethora of options for contracting virii, you can read your email, you can visit a web site, you can use AIM.. not to mention that it is routine in MS OSes to download and execute unknown binaries.. all of these are tasks performed every single day by most windows users.

    Contrast this to linux where you have only a single option: execute an unknown binary as root, a very rare task indeed.

    The inherent difficulty in contracting a virus in linux has little or nothing to do with any of the things you mentioned. It comes down essentially to the file systems. On linux, or most any other multi-user operating system it is a very rare occurance that normal users have the ability to introduce a virus into the system.

  7. More essence of woo... by QuadGoatBoy · · Score: 1 · on AOL Instant Messenger Remote Hole

    Group image 1
    Group image 2
    Woo member Blake
    Woo member Remmie

  8. More essence of woo... by QuadGoatBoy · · Score: 1 · on AOL Instant Messenger Remote Hole

    Group image 1
    Group image 2
    Woo member Blake
    Woo member Remmie

  9. More essence of woo... by QuadGoatBoy · · Score: 1 · on AOL Instant Messenger Remote Hole

    Group image 1
    Group image 2
    Woo member Blake
    Woo member Remmie

  10. More essence of woo... by QuadGoatBoy · · Score: 1 · on AOL Instant Messenger Remote Hole

    Group image 1
    Group image 2
    Woo member Blake
    Woo member Remmie

  11. Re:The w00w00 folks... by QuadGoatBoy · · Score: 1 · on AOL Instant Messenger Remote Hole

    Here is his girlfriend's pic. Nice couple ;).

  12. The w00w00 folks... by newbob · · Score: 0, Offtopic · on AOL Instant Messenger Remote Hole
    ...look like a freak show!

    Check out this guy , for instance. Doesn't he look dreadful?!

    I'm sure he'll regret this look someday.

  13. Here's an idea! by spookyfluke · · Score: 1, Informative · on AOL Instant Messenger Remote Hole

    I hope this get moded as "funny" or "I didn't read the article and I'm simply replying because I hate everything that's not linux". This article shows that AOL intends to fix the problem on the server-side.

  14. Better Link by XBL · · Score: 3, Informative · on AOL Instant Messenger Remote Hole

    http://www.w00w00.org/advisories/aim.html is a better link.

    Hey, if you guys want open-source IM, check out http://www.jabber.org The server is open-source and it's a distributed XML-based network. Lots of different, cool clients too. JabberIM for Windows, and Gabber for Linux are the most mature ones though. There are bridges to the AIM and ICQ networks available on some servers, but the ones on Jabber.org have been blocked by AOL... nice huh?

  15. Re:buffer overflows and script kiddies by Jonathan+White · · Score: 1 · on LinuxPPC Challenge: Crack the Box and Keep it!
    Yes, the return address is modified to return to your evil code which you inserted in the buffer you overflowed. That code generally does something useful like give you a shell. See Smashing The Stack For Fun And Profit for a much better explanation. Different architectures do grow the stack in different directions but that doesn't prevent the exploitation of overflows.

    Heap based overflows are very similar but they occur in the data (bss) segment of a program. w00w00 on Heap Overflows has a pretty good explanation.