Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: C# Exceptions

from [3 shool] Network Security [Permanent Link]
Subject: Re: C# Exceptions
Date: Fri, 25 Aug 2006 15:39:24 -0700 
Correct, MiTM is the larger perspective where someone could sit in
between and tamper data to cause exceptions.

How easy/feasible would it be for an attaker to run malicious code on
the application by causing access violation?

Can he/she get SYSTEM level access or run commands as SYSTEM such as
adding an user by doing this malicious access violations?

Are the other exceptions like Null Reference or Invalid Operation
serious? Can they be converted to an Access Violation?

On 8/25/06, Krpata, Tyler <tkrpata@bjs.com> wrote: 
It seems like you're saying that the application makes requests and
receives replies from a web service, and that you were able to crash the
application by sending invalid replies? In this case, maybe an attacker
that was able to launch a man in the middle attack could exploit the
application that way.


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------

[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: C# Exceptions, 3 shool
Next by Date:  RE: C# Exceptions, Krpata, Tyler
Previous by Thread:  Re: C# Exceptions, 3 shool
Next by Thread:  RE: C# Exceptions, Steven Scheffler
Indexes:  [Date] [Thread] [Top] [All Lists]