Collected research
Inter Protocol Exploitation
ha.ckers.org web application security lab
RSnake's write-up of Wade Alcorn's Inter Protocol Exploitation paper. A browser can be driven to speak a non-HTTP protocol to an intranet service, and the traffic it carries can be a working buffer overflow, demonstrated against an Asterisk VoIP server rather than only a toy socket listener. It puts Metasploit-style exploitation behind XSS.
Record
- Document
- ha.ckers.org web application security lab
- Published by
- ha.ckers.org
- Topic
- Other
In the archive
Related sources
- Inter-Protocol Exploitation Whitepaper
Tags
This page is the archive's own catalogue record. The research is the work of ha.ckers.org, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .