[33743] in bugtraq
Bypassing PatchFinder 2
daemon@ATHENA.MIT.EDU (Edgar Barbosa)
Mon Feb 16 15:49:09 2004
Date: 15 Feb 2004 17:35:45 -0000
Message-ID: <20040215173545.22210.qmail@www.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: Edgar Barbosa <embarbosa@yahoo.com>
To: bugtraq@securityfocus.com
I wrote an article about how do bypass the Execution Path Analysis
used by PatchFinder utility, avoiding Windows 2k/XP rootkit detection.
http://www.geocities.com/embarbosa/bypass/bypassEPA.pdf
Soon, will be a version for Linux Kernel.
