We need to get gayer
quick! overflow my buffer!
*sends ya a lil zip bomb*
*sends you malformed tcp packets* https://support.microsoft.com/en-us/topic/ms05-019-vulnerabilities-in-tcp-ip-could-allow-remote-code-execution-and-denial-of-service-428fb0f9-f446-1a98-7964-eb7494c89343
windows has a long history of fucking up their tcp/ip stack and udp packets… idk how but there was a udp based one as recent as circa 2022 lol
I guess I should explain that x86 has a way of setting bytes in memory as executable or not and like Microsoft is deliberately fucking up so that their paged memory is set to executable by the kernel to allow for these rces… buffer overflow doesn’t typically end up to code execution unless you’re really ducking special since memory is marked non executable by default
Dissecting and Exploiting TCP/IP RCE Vulnerability “EvilESP”
Lol, lmao even
Some kinda shit I’d expect out of my students not fucking corp released software. Love to see it
I maintain a fleet of ms stuff so I’m constantly reading the news for rces and shit and like every fucking patch Tuesday there’s a big write up about how Microsoft Shitass has patched 15 rces and it’s like how the fuck. I think Microsoft should have the c programming language taken away because as much as they emphasize building nt on c++ they do something more akin to c in c++ so the safety features like smartptrs are ignored. Microsoft kernel devs are the reason why RedoxOS exists because how the fuck do you design a kernel so bad like that. it’s incredibly hard to actually make an rce in your code youd have to be doing something that requires a language interpreter (heh this is why electron apps tend to have rces in them because js exists, and eval() in js especially) or dealing with a lot of reflection at runtime… when writing code I don’t think I’ve ever been paranoid that I’d have an rce bc of buffer overflow
like PIE and execute disable exist so uh it’s really weird to see a corporation suffer so hard from something the rest of the industry just doesn’t have to deal with a majority of the time lol
Honestly from what I’ve seen from time in some bigger orgs its fucking amazing how much shit is just rigged together with code tape. god I miss how bad it was
corporate development mentality is what turned me off from software engineering as a career and is why I hide in the shadows as a sysadmin mocking developers because they write atrocious software I have to manage