Informative Information for the Uninformed
Current
v9
v8
v7
v6
v5
v4
v3
v2
v1
All
About
Vol 2
»
2005.Sept
Next:
Contents
Temporal Return Addresses
Exploitation Chronomancy
skape
mmiller@hick.org
Last modified:
8/6/2005
Contents
Foreword
Introduction
Locating Temporal Addresses
Determining Per-byte Durations
Calculating Viable Opcode Windows
Picking the Time to Strike
Determining System Time
DCERPC SrvSvc NetrRemoteTOD
ICMP Timestamps
IP Timestamp Option
HTTP Server Date Header
IRC CTCP TIME
Determining the Return Address
Case Study: Windows NT SharedUserData
The Properties of SharedUserData
Locating Temporal Addresses
TickCountLow
InterruptTime
SystemTime
Calculating Viable Opcode Windows
Case study: Example application
Conclusion
Bibliography
About this document ...