Collaborate Disseminate
I have an excersise of making a buffer flow exploit for directing a function insinde another function without calling it. First I need to print "now inside entrance()" then print "now inside secret()"
I was able to prin… Continue reading How to avoid segmentation fault in a buffer overflow exploit
I am trying to verify a signature using OpenSSL in C++. The code is below:
bool verifySignature(QString updateInfo_file_signature, QString uInfo_file_hash) {
RSA *rsa = NULL;
BIO *keybio;
FILE *file = fopen("pubkey.pem&qu… Continue reading error:0407008A:rsa routines:RSA_padding_check_PKCS1_type_1:invalid padding openssl C++
I am trying to verify a signature using OpenSSL in C++. The code is below:
bool verifySignature(QString updateInfo_file_signature, QString uInfo_file_hash) {
RSA *rsa = NULL;
BIO *keybio;
FILE *file = fopen("pubkey.pem&qu… Continue reading error:0407008A:rsa routines:RSA_padding_check_PKCS1_type_1:invalid padding openssl C++
Note: this is extra credit for a homework assignment
I’m trying to figure out how to call win() via stdin. I assumed that the vulnerability would be exploited by a buffer overflow, but I can’t even figure out how to overflow the buffer (if… Continue reading Exploit stdin to call local function in C
So I have this program in C that I’m trying to exploit which has a vulnerability in a function, namely it’s using gets. I’m trying to overflow and change the return address so the program returns one or both of the two functions that are n… Continue reading Having trouble with learning Buffer Overflows
There are plenty of small microcontrollers available for all kinds of tasks, each one with its unique set of features and capabilities. However, not all of us want to spend time mucking about in C or assembly to learn the intricacies of each different chip. If you prefer the higher …read more
I am creating a file that uses Socket for exchanging data. When I use Python I have a firewall pop up where I am asked to accept the use of the application, but when my C++ program tries to do the same, the firewall doesn’t warn me. My que… Continue reading What makes firewall pop up?
Consider following C code snippet:
void barfoo (int authstatus) {
char packet[1024];
fgets (packet, 1023, stdin);
if (authstatus != 0)
system (packet);
else
syslog ("Not authorised to process packet"… Continue reading Is following code vulnerable?
Today I wanted to continue the series on using LD_PRELOAD. In today’s post we are going to use LD_PRELOAD to hijack the rand() function in a simple random number guessing game to control the generation of random numbers and effectively be able to … Continue reading Not-So-Random: Using LD_PRELOAD to Hijack the rand() Function
I am running few security algorithms on my product and would like know few general details about the CRLs (Certificate Revocation Lists).
I am using the following command openssl asn1parse -inform DER -in signed.p7s >> sign_extract.t… Continue reading CRL date formats and conversion from GMT to epoch