query: Windows exploits (random stack frame pointer)

[bekz]

Hi All,

I have written exploits for binaries with fixed stack frame pointer.
But now a days most of the compliers generates instrutions with random
stack frame pointer. And with injecting Windows API function addresses,
how can we inject the argument address for foreign exe?

How can I go about writing exploits for such codes?

Note: Most of the codes that I would like to write exploits is having
sprintf/sscanf stuffs.

Thanks
becks

[Keith Thompson]

"bekz" <be******@gmail.com> writes:

I have written exploits for binaries with fixed stack frame pointer.
But now a days most of the compliers generates instrutions with random
stack frame pointer. And with injecting Windows API function addresses,
how can we inject the argument address for foreign exe?

How can I go about writing exploits for such codes?

Note: Most of the codes that I would like to write exploits is having
sprintf/sscanf stuffs.

This is entirely off-topic in comp.lang.c. Even if it were topical, I
certainly *hope* that nobody would help you with this. Are you trying
to write viruses?

--
Keith Thompson (The_Other_Keith) ks***@mib.org <http://www.ghoti.net/~kst>
San Diego Supercomputer Center <*> <http://users.sdsc.edu/~kst>
We must do something. This is something. Therefore, we must do this.

[Sensei]

On 2006-04-12 18:36:18 +0200, Keith Thompson <ks***@mib.org> said:

"bekz" <be******@gmail.com> writes:

I have written exploits for binaries with fixed stack frame pointer.
But now a days most of the compliers generates instrutions with random
stack frame pointer. And with injecting Windows API function addresses,
how can we inject the argument address for foreign exe?

How can I go about writing exploits for such codes?

Note: Most of the codes that I would like to write exploits is having
sprintf/sscanf stuffs.

This is entirely off-topic in comp.lang.c. Even if it were topical, I
certainly *hope* that nobody would help you with this. Are you trying
to write viruses?

Worms, definitely not viruses.

--
Sensei <se******@mac.com>

The optimist thinks this is the best of all possible worlds.
The pessimist fears it is true. [J. Robert Oppenheimer]