<div>hi,</div>
<div> </div>
<div>I'm writing an article on zero days and vendor sponsored zero day programs. And i came across this interesting article: <a href="http://www.darkreading.com/document.asp?doc_id=130313">http://www.darkreading.com/document.asp?doc_id=130313
</a> </div>
<div> </div>
<div>and got to read more details here: <a href="https://www.blackhat.com/presentations/bh-usa-07/Maynor_and_Graham/Whitepaper/bh-usa-07-maynor_and_graham-WP.pdf">https://www.blackhat.com/presentations/bh-usa-07/Maynor_and_Graham/Whitepaper/bh-usa-07-maynor_and_graham-WP.pdf
</a> </div>
<div> </div>
<div>Robert Graham and David Maynor have given complete details on how to decrypt the tippingpoint nips zdi signatures, how to evade the simple regular expressions and how the NIPS signatures suck. (example being the blaster payload). Anybody tried this out and willing to share?
</div>
<div> </div>
<div>The article mentions that people already knew about this and it must be very obvious that people with tippingpoint boxes must have been exposed to vulnerabilities and too many evasions. Is there anyone who is willing to testify this? Also i'm looking for other vendor related responses as well.
</div>
<div> </div>
<div> </div>
<div>Thank you,</div>
<div>LS</div>