Collaborate Disseminate
I’m doing a binary challenge from pwnable.kr and I’m examining a some ROP gadget.
Until now I’ve always used gadget ending with ret or syscall/int 0x80, but now ROPgadget gave me a gadget ending with ret 0.
What’s the difference wrt ret?
For the majority of workloads, fiddling with assembly instructions isn’t worth it. The added complexity and code obfuscation generally outweigh the relatively modest gains. Mainly because compilers have become quite …read more Continue reading AVX-512: When The Bits Really Count
I’m not sure if this makes sense, I have no programming experience, but I’m just curious whether it’s possible to exploit a system by exploiting a vulnerability in the programming language the system uses, or by turning that system’s progr… Continue reading Can you hack something using assembly code vulnerability?
[PeriscopeFilms] on YouTube has many old TV adverts and US government reels archived on their channel, with some really interesting subjects to dive in to. This first one we’re highlighting …read more Continue reading NASA Hardware Techniques: Soldering Space Electronics Like It’s 1958
[George Stagg] recently found himself stung by the burden of free time while in lockdown. Needing a project to keep him occupied, he decided to upgrade his 90s Casio CFX-9850G …read more Continue reading Old Casio Calculator Learns New Tricks
I’ve been working on a buffer overflow on a 64 bit Linux machine for the past few days. The code I’m attacking takes in a file. This original homework ran on a 32-bit system, so a lot is differing. I thought I’d run with it and try to lear… Continue reading Why does my RIP value change after overwriting via an overflow?
Levy’s Hackers: Heroes of the Computer Revolution is something like required reading for the hacker subculture, and Hackaday by extension. The first section of that book is all about early …read more Continue reading Reliving Second-Hand Nostalgia with the PDP-11
When you are working with secret keys, if your code branches unequally it could reveal bits of the secret keys via side channels. So for some algorithms it should branch uniformly independently of the secret key.
On C/C++/Rust, you can use… Continue reading How are code-branch side channel attacks mitigated on Java?
Join us on Wednesday, February 9 at noon Pacific for the Pick and Place Hack Chat with Chris Denney! We in the hacker trade are pretty used to miracles — …read more Continue reading Pick and Place Hack Chat
I have a C program that has a function that is not included in main(). When i try to buffer overflow the program with the adress of the uncalled function, I get a segmentation error but the targeted function doesn’t run and the EIP is not … Continue reading Segmentation error while buffer overflow but EIP is not overwritten