SBDA âsame bug, different appâ - Security Assessment

More documents

Recommendations

Info

Recognising A Vulnerability • Debuggers Always have a debugger running Best to have a debugger attached to the target process • Exceptions Not all exploitable exceptions are unhandled • Event Log Checking the event log can sometimes show crashes • Be Alert Spot differences in replies or target behavior • Disregard Standard Error Messages Go above and beyond the limits • Vulnerability Example Enough talk…. lets break something Copyright Security-Assessment.com 2005
SDBA Theory In Practice • Some Examples From Experience On the following few slides are examples of some SBDA vulnerabilities that I have discovered • SBDA Same bug, different app… Nothing new about these bugs • Take Note Though The information in the following slides should point you in the right direction to find your own Copyright Security-Assessment.com 2005
Page 1 and 2: SBDA “same bug, different app”
Page 3 and 4: SBDA - What It’s Not • Not The
Page 5 and 6: SBDA - The Conception • I Wanted
Page 7 and 8: How Can This Be Applied To Research
Page 9 and 10: The SBDA Advantage • Gives Resear
Page 11 and 12: The AV / Archive SBDA (in reverse)
Page 13 and 14: Packet vs File • Both Are Data Bo
Page 15: Some Common Test Methods • Fuzzin
Page 19 and 20: The Long Value SBDA • Length Valu
Page 21 and 22: The Long Import SBDA • Jan, 2005
Page 23 and 24: The URL Handler SBDA • Mar 09, 20
Page 25 and 26: SBDA To The Test • Quick File Bas
Page 27 and 28: 2 nd Generation Vulnerabilities •
Page 29 and 30: Wrap Up • Same Bug, Different App

SBDA âsame bug, different appâ - Security Assessment

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?

SBDA âsame bug, different appâ - Security Assessment