7 ms·
Based on my poking around, the guid provided is included in the shell code to be loaded into memory. I'm not sure if it is a windows only exploit or not. There
by tmbeihl 13y ago
Based on my poking around, the guid provided is included in the shell code to be loaded into memory. I'm not sure if it is a windows only exploit or not. There is an ID of ws2_32IPHLPAPIPA6 that is also included as part of the shellcode.
- tmbeihl 13y agoMaybe 2 0-days being used? Looks like buffer overflow in firefox js + win32 exploits? I don't do much win 32, so maybe someone else should take a peek
- theoden 13y agoApparently iphlpapi.dll is a Windows dll that can do things like getting the IP address, MAC address, etc. "The Internet Protocol Helper (IP Helper) API enables the retrieval and modification of network configuration settings for the local computer."