[Plug-security] ShellCode Fun

[Sam Kreimeyer]

This seems like it's actually pretty lean.

I'm not too familiar with AV or IPS pattern matching, but do you think it
would be likely to account for bit shifts? It's a good idea, since it
obfuscates the string and gets rid of the problem with entering null bytes,
but I wonder how well it works in the wild.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.PLUG.phoenix.az.us/pipermail/plug-security/attachments/20120312/e5063c8a/attachment.html>