reverse engg

[Grim Reaper]

well, i was working on a technique to understand what patches an OS provide so as to understand differences of it now and before, and then exploit it. But don't know exactly which components to look for ,any help...................

[Mark]

Google would be a good start, also if we or yourself knew exactly what your looking and a starting point would help. But, as I have already said, I dont like the word exploit, especially when we are trying to make a good rep for oursleves. The fact that you want to run the exploit also leaves wondering what your reseach or proposal is.

[phread]

Way to feign benefit of the doubt, there Mark, but it's pretty obvious that he wants to try and exploit people who are late to patch.

[Mike]

define 'late' ... :)

[Mark]

Okay, I didn't want to jump right that. Point them to google first. With what the site is about its not what we want to promote. There are plenty of other forums to ask "How do I hack....". Sorry Grim Reaper but thats what it sounds like.

[Grim Reaper]

you are right MARK
i am new to all this stuff
my concepts are weak
thats why i joined this site and hope to get positive responses from all

[Mark]

Sorry, didn't mean to dig at you.

[fragge]

that's the most likely scenario. whilst i don't have a problem with blackhats being here and working on blackhat projects, i do not particularly like newbies coming along to learn blackhat so they can 1337 pwn some b0x3s... -_-

[scorcher821]

Could you be more specific? Its hard to find anything if you are looking for nothing.

[Wildcat]

I think he means something like that:
German: http://www.heise.de/newsticker/Automatische-Exploits-durch-Patch-An...
English report: http://www.cs.cmu.edu/~dbrumley/pubs/apeg.html
But not automated!?

[Sam Aldis]

it is possible to see which applications the updates are affecting before you
apply the updates, this being the case you can decompile the application
and dump it to a file before and after applying the updates and then compare
the two to see what the differences are.

[bl00dsh0t]

You can do this with pendmoves. http://www.microsoft.com/technet/sysinternals/fileanddisk/pendmoves...

[Grim Reaper]

i just wanted to say which security component do you think that is most vulnerable and critical and would be most likely to be updated