[Full-disclosure] Win32 Heap Exploits

Nicolas RUFF nicolas.ruff at gmail.com
Tue Jan 3 10:42:21 GMT 2006


> But if i execute the server without ollydbg there happen nothing.
> Have anybody an idea what i make wrong. Test on a winxp sp1 system.

As pointed out multiple times, Windows heap is not the same whether the
program is flagged as "being debugged" or not.

You should always *attach* the debugger to the process and not run the
process from within the debugger.

Regards,
- Nicolas RUFF



Full-Disclosure is hosted and sponsored by Secunia.