Comments on: QuickPost: Arduino + Alcohol Gas Sensor + WiShield + LCD http://blog.didierstevens.com/2009/09/09/quickpost-arduino-alcohol-gas-sensor-wishield-lcd/ (blog 'DidierStevens) Thu, 29 Jul 2010 03:37:46 +0000 hourly 1 http://wordpress.com/ By: Jukda http://blog.didierstevens.com/2009/09/09/quickpost-arduino-alcohol-gas-sensor-wishield-lcd/#comment-35957 Jukda Tue, 20 Oct 2009 08:09:25 +0000 http://blog.didierstevens.com/?p=1751#comment-35957 This is so cool!!! And I agree with the above poster, sometimes a alco-lock could save you from a lot of trouble ;-) This is so cool!!! And I agree with the above poster, sometimes a alco-lock could save you from a lot of trouble ;-)

]]> By: ABI http://blog.didierstevens.com/2009/09/09/quickpost-arduino-alcohol-gas-sensor-wishield-lcd/#comment-35768 ABI Tue, 15 Sep 2009 20:16:08 +0000 http://blog.didierstevens.com/?p=1751#comment-35768 Sometimes I could really use an alco-lock in my mail program! ;) Nice gadget. It would be even cooler if it could power itself from a USB port! I've been reading your old posts about the Basic Process Manipulation Tool Kit and other cool stuff like SRP whitelist bypassing btw. That got me thinking. If SRP checks for CreateProcess and LoadLibrary calls to block stuff, and when you have bypassed this with the BPMTK, has anyone checked if SRP even checks for all the calls we can use to execute code? Lots of exploits use the old 16-bit WinExec() in their shell code instead of CreateProcess. Does SRP even check for that? Anyone know? Would be a pretty easy bypass if it didn't, lol. Sometimes I could really use an alco-lock in my mail program! ;) Nice gadget. It would be even cooler if it could power itself from a USB port!

I’ve been reading your old posts about the Basic Process Manipulation Tool Kit and other cool stuff like SRP whitelist bypassing btw. That got me thinking. If SRP checks for CreateProcess and LoadLibrary calls to block stuff, and when you have bypassed this with the BPMTK, has anyone checked if SRP even checks for all the calls we can use to execute code? Lots of exploits use the old 16-bit WinExec() in their shell code instead of CreateProcess. Does SRP even check for that? Anyone know? Would be a pretty easy bypass if it didn’t, lol.

]]>