Guarded Memory Move (GMM)

The Guarded Memory Move tool gets handy when you have to study buffer overflows and you need to catch them together with a "good" stack image. When a stack overflow has been exploited, the back trace is already gone together with good information about parameters and local variables, that are of vital importance when trying to understand how the attacker is trying to work out the exploit.

Tags:

Read the complete paper at http://www.xmailserver.org/davide.html