Re: Getting Base Address using the Structured Exception Handler

Dear Nobody Mind,

HSJ's shellcode (http://hsj.shadowpenguin.org/misc/iis5mdac_exp.txt) works without using SEH. It should be able to find the kernel32 unless one 'rebase' it to somewhere else.

If you check the aspcode.c
(http://packetstormsecurity.nl/0209-exploits/aspcode.c), SEH is used not only in getting the kernel32 base memory, but for other purpose too.

sk
----- Original Message -----
From: "Nobody Mind" <cod3po3t@yahoo.com> To: <vuln-dev@securityfocus.com>
Sent: Thursday, June 26, 2003 4:49 AM
Subject: Getting Base Address using the Structured Exception Handler

> I basically am wondering if anyone has links or can
Received on Thu Jun 26 12:08:09 2003