JaBbA's Hut

More interesting stuff today. buffer overflows (which I was pretty clear on), format string errors (which I had never understood before today) and netcat.

Evening sessions on the CDI initiatives and the SANS top 20. I signed up to lead a BOFH session on friday about LAMP security, and I'm going to use that as a jumping off point to get involved in the LAMP security CDI. I also may have gotten myself committed to porting the sysadmin cheatsheet from linux to AIX.

Then I spent the evening researching the do_brk() kernel exploit to see if I can design a GCIH practical around the Debian hack. I can now crash a linux box locally at will without being root, but I still need to get root priveleges, not crash it. We'll see.

what a day. and it starts up again in 8 hours.