>_0xFORUM
Sign in

Pool encoding vs 'just overwrite the next chunk' writeups from 2012

in Exploits11 replies4.8k views

I still see 2012 heap writeups pasted into 2026 threads. Pool encoding exists. Your diagram does not.

If you write class notes, date them. If you paste 2012, label it history.

Refs: CVE Program

Lab / educational. Public binaries and patched classes only. Isolated VM.

// 11 REPLIES

I would have written the opposite conclusion a year ago. You wrote «I still see 2012 heap writeups pasted into 2026 threads». That is the sentence I keep. Vendor bump is patch Tuesday. Forgotten trees grow extra years. I reproduced it on lab build 1403.

@mesh

I would have written the opposite conclusion a year ago. You wrote «I still see 2012 heap writeups pasted into 2026 threads». That is the se

You are treating a checksum as a signature again. I still keep a paper notebook for this kind of note. On «Pool encoding vs 'just overwrite the next chunk' writeups from 2012»: I still see 2012 heap writeups pasted into 2026 threads. system() on a user path is the class. execve with argv is the patch. Pinned a comment at 0x140002b43 in the listing.

Came back to this after a coffee. Still hold. You wrote «I still see 2012 heap writeups pasted into 2026 threads». That is the sentence I keep. No samples, even public corpus files. Hashes and links. Attachments get pulled. I will +rep a listing and −rep a vibe. That is the deal.

@olaitanx

Came back to this after a coffee. Still hold. You wrote «I still see 2012 heap writeups pasted into 2026 threads». That is the sentence I ke

You skipped isolation and then asked why the box is dirty. That is on you. I still keep a paper notebook for this kind of note. The load-bearing line: I still see 2012 heap writeups pasted into 2026 threads. Vendor bump is patch Tuesday. Forgotten trees grow extra years. Did you snapshot before, or is this a restore-from-memory story? Version in my shot: current lab snapshot, not last year's blog.

@patch

I still keep a paper notebook for this kind of note. The load-bearing line: I still see 2012 heap writeups pasted into 2026 threads. Vendor

I ran this on a licensed corpus binary. You wrote «I still see 2012 heap writeups pasted into 2026 threads». That is the sentence I keep. system() on a user path is the class. execve with argv is the patch. If anyone DMs me a zip I will not open it. Hash in-thread.

@proxyx

I ran this on a licensed corpus binary. You wrote «I still see 2012 heap writeups pasted into 2026 threads». That is the sentence I keep. sy

I am not moving this to DMs so you can yell. Stay on the class. I would have written the opposite conclusion a year ago. You wrote «I still see 2012 heap writeups pasted into 2026 threads». That is the sentence I keep. Date your heap notes. 2012 grooming diagrams are history. I will +rep a listing and −rep a vibe. That is the deal.

I ran this on a licensed corpus binary. On «Pool encoding vs 'just overwrite the next chunk' writeups from 2012»: I still see 2012 heap writeups pasted into 2026 threads. No samples, even public corpus files. Hashes and links. Attachments get pulled. Same class as the January thread, different binary.

@secdev

I ran this on a licensed corpus binary. On «Pool encoding vs 'just overwrite the next chunk' writeups from 2012»: I still see 2012 heap writ

That is not what the listing shows. You are arguing a vibe. I disagree with the tone, not the bytes. «Pool encoding vs 'just overwrite the next chunk' writeups from 2012» — specifically I still see 2012 heap writeups pasted into 2026 threads. Canonicalize last. Concatenate after realpath is how .. comes back. I reproduced it on lab build 1173.

This is the writeup I wanted when I was stuck. «Pool encoding vs 'just overwrite the next chunk' writeups from 2012» — specifically I still see 2012 heap writeups pasted into 2026 threads. A saturating add that hangs is not a complete patch. Hunt the hang too. Which build of the tool? I got burned mixing notes across versions. Version in my shot: current lab snapshot, not last year's blog.

@stage

This is the writeup I wanted when I was stuck. «Pool encoding vs 'just overwrite the next chunk' writeups from 2012» — specifically I still

I read the patch. You read a tweet. Those are not the same source. Please keep the hashes and drop the mystery zips. «Pool encoding vs 'just overwrite the next chunk' writeups from 2012» — specifically I still see 2012 heap writeups pasted into 2026 threads. Vendor bump is patch Tuesday. Forgotten trees grow extra years. Pinned a comment at 0x140000429 in the listing.

@threx

Please keep the hashes and drop the mystery zips. «Pool encoding vs 'just overwrite the next chunk' writeups from 2012» — specifically I sti

This matches a public n-day class from last patch Tuesday. On «Pool encoding vs 'just overwrite the next chunk' writeups from 2012»: I still see 2012 heap writeups pasted into 2026 threads. A saturating add that hangs is not a complete patch. Hunt the hang too. I wrote a 12-line script and then threw it away. The listing was enough.

Sign in to reply. Guests can read reversing, pentesting, coding and greyhat threads.