On: Phrack 66 (June 2009)

[mziulu]

Memory analysis and exploitation is fascinating. Anyone knows any good resource for someone interested in it but still quite "noobish"? I know only Drepper's paper and the classic "Smashing the stack [...]"...

[leif → mziulu]

Some papers from a security class at my school, varying levels of difficulty, but they all start from pretty low assumed knowledge if you're careful:

http://www.cs.sunysb.edu/~rob/teaching/cse509-sp09/beyondsma... http://www.cs.sunysb.edu/~rob/teaching/cse509-sp09/formatstr... http://www.cs.sunysb.edu/~rob/teaching/cse509-sp09/asrandom....

[rw → mziulu]

Matasano's "Chargen" blog has a few posts on the Flash vulnerability Mark Dowd found last spring. They make it understandable.

Their site is currently down, but Google has a cache: http://74.125.47.132/search?q=cache:5VHY2EwpC-8J:www.matasan...