C++ is a horrible language. It's made more horrible by the fact that a lot of substandard programmers use it, to the point where it's much much easier to generate total and utter crap with it. Quite frankly, even if the choice of C were to do *nothing* but keep the C++ programmers out, that in itself would be a huge reason to use C.
/*
* off by one ebp overwrite in sudo prompt parsing
function
* discovered by beyond security in 2008, thx ge
*
* to compile: gcc -pipe -o sobo sobo.c ; ./sobo
*
* please use responsibly! a patch has already been
sent
* upstream and a fix will be included in the next
sudo release
*
*/
>>8 Anyone want me to post 0day?
You post it, it's not 0day anymore.
Good job to whoever leaked that exploit in >>9 (it was probably leaked somewhere else; I don't mean he *leaked* it here)
Now some fat fuck will benifit from the exploit, post it in bugtraq, rip credits, etc.
And nobody will give a shit really. stop "posting" exploits or giving a shit about bugfixes
(but that will never happend, you will always give ass for some xplt won't you? fame is importand!!! I HAQD SUDO IN '08 LOOK UP MY HANDLE ON SEKURITYFOKUS!!!)
With that said, off-by-one exploitation is nothing new.
How to apply?
Gather all your info, all your proof and stuff, send a professional looking application to evil.sesshomaru@gmail.com, DO NOT private message me, I ignore those alot. Talk like you have a brain, I understand some of you are from different countries but I dont care, you better talk like you've been speaking english for 200 years, I will ignore any "me wan 0day gruup plxz" emails.
>>35
Your mother called me her mistress last night. Then I proceeded to stab her nipples with my high heels, this got me hard and I shot a huge load all over her. LOL!
>>36
No, see, the correct response would have been
"Your mother called me her mistress last night. Then I proceeded to sudo her nipples with my stolen exploits, this got me hard so I preceded to spend the rest of the evening re-reading SICP by the fireplace in my nightgown while humming the SICP theme song and gently stroking my unencumbered erection."
``Your mother called me her mistress last night. Then I proceeded to sudo her nipples with my stolen exploits, this got me hard so I preceded to spend the rest of the evening re-reading SICP by the fireplace in my nightgown while humming Bach's Jesu, Joy of Man's Desiring and gently stroking my unencumbered erection.''
I be Faireth of the Ex clan, a crackateer. I doth requisition thee to joineth mine group of crackateers. Mine private crackatudes be at thoust disposal with thine purchasaed membership.
Don't Ask Me How to compile , if u don't know how then you shouldn't be looking.
I hate this kind of approach. And by ``hate'' I mean FUQIN RAGE. The other place where you can find people like that, besides haxxor comunityz, are these dreaded private torrent trackers. HURRRRR WE R SECRAT CLUB WE SECRAT MUSIKS AND SECRAT MOVIES DURRRRRRR
Name:
Anonymous2008-06-06 20:51
>>66
I'd hate it too, just because whoever said that is a huge faggot and is being trolled automatically. But it's a good method to keep script kiddies out, along with deliberate syntax errors.