OpenRCE

About Articles Book Store Distributed RCE Downloads Event Calendar Forums Live Discussion Reference Library RSS Feeds Search Store Users What's New

Customize Theme

Flag: Tornado! Hurricane!

Created: Thursday, November 27 2008 10:59.09 CST

Printer Friendly ...

Freedom for everything - total annihilation of process memory

Author: GynvaelColdwind

# Views: 2042

Sitting in my hotel room at the Polish edition of PyCON, I started to think what would happen, if a normal Windows process wipes out (almost) all of it's memory. By "wipe out" I mean to free/unmap what is possible (VirtualFree and UnmapViewOfFile), and overwrite with zeroes the rest. I've started to experiment with this, wanting to know how will the system, and other applications, react to this uncommon process condition. Below I describe the creation of a test application (I've found a few interesting (imho) problems), and a funny thing OllyDbg does while attaching to such a process...

More at my blog...
http://gynvael.coldwind.pl/?id=93

Blog Comments

bw	Posted: Tuesday, December 2 2008 08:16.33 CST
gyn you're my hero :), when i grow up i wanna be just like you :)

GynvaelColdwind	Posted: Friday, December 5 2008 14:00.46 CST
Do you want a poster of me ? ;>>> Only 9,99$ ;D Btw, post some news will ya ? ;> Another day or two and people will start mixing up our blogs, since both get updated equally frequent ;D (or should I say, with a equal delay :D)

Active in Last 5 Minutes
	dvvord

There are 16,646 total registered users.

Recently Created Topics
SSL keyfindert plugi...	Mar/15
ApiHooks.com down	Mar/15
how to crate a PATC...	Mar/10
wsnpoem audio.dll	Mar/09
suggestions - RE tra...	Mar/09
Requesting Suggestio...	Mar/06
Force enable debug p...	Mar/05
upgrading new image ...	Mar/03
upgrading new image ...	Mar/03
upgrading new image ...	Mar/03

Recent Forum Posts
suggestions - RE tra...	enm16
wsnpoem audio.dll	zhane
suggestions - RE tra...	Silkut
how to crate a PATC...	Silkut
suggestions - RE tra...	RolfRolles
wsnpoem audio.dll	debbie
Requesting Suggestio...	secursig
Requesting Suggestio...	phn1x
how to get executabl...	RabidCi...
how to get executabl...	RabidCi...

Recent Blog Entries
	RolfRolles	Mar/08
Compiler Optimizations for ...
	ReWolf	Mar/04
When memory management goes...
	thesprawler	Feb/20
log1949.txt -- Wondering ho...
	thesprawler	Feb/20
log1949.log -- created on C...
	thesprawler	Feb/17
Trying to reverse the firmw...
More ...

Recent Blog Comments
	Boken on:	Mar/12
Compiler Optimizations for ...
	wildinto on:	Mar/10
Compiler Optimizations for ...
	Orr on:	Mar/10
Compiler Optimizations for ...
	bughoho on:	Mar/09
Compiler Optimizations for ...
	cliffwolf on:	Mar/08
Compiler Optimizations for ...
More ...

Imagery

SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit