Collaborate Disseminate
C is the most perfect language and it will run on anything. It will even run on a computer without a CPU.
The computer in question here is the Gigatron, a fully-functional ‘home computer’ the likes of which you would find in the late 70s and early 80s, complete with …read more
I’m talking about the overflow flag that is used in some architectures like x86:
https://en.wikipedia.org/wiki/Overflow_flag
why aren’t operating systems using this overflow flag to stop integer overflows?
what is the usag… Continue reading If x86 architecture has overflow flag in the CPU, then why can’t we use it to detect integer overflows in C binaries?
Every 3 seconds, the Server sends the Client a command to ask for data, e.g., through a single letter “R” or “r” (request).
In C program run on visual Studio 2019
I am trying to figure out how to write a plugin in ettercap which modifies the payload of a packet. I have a vm with a simply python socket server and a simply python client on the ettercap machine. Once a second it just send… Continue reading ettercap packet modification
I have a simple C program that asks for two inputs
I’m trying to overflow them so that I can access a shell, but I’m not sure what I need to do to access the shell.
I can overflow them to just print out the wrong values or g… Continue reading How to make a buffer overflow run shell? [on hold]
If you keep up with the field of web development, you may have heard of WebAssembly. A relatively new kid on the block, it was announced in 2015, and managed to garner standardised support from all major browsers by 2017 – an impressive feat. However, it’s only more recently that …read more
Continue reading WebAssembly: What Is It And Why Should You Care?
I’m trying to communicate in https with a server using WinInet (from the Win32 API).
Here is a very minimalist code :
HINTERNET ses = InternetOpenA(“test”,INTERNET_OPEN_TYPE_DIRECT,NULL,NULL,0) ;
HINTERNET con = InternetCon… Continue reading Client authentication (certificate + private key) using WinInet
So, I’m trying to exploit this program that has a buffer overflow vulnerability to get/return a password behind a locked .txt contains the password. I shouldn’t need to use GDB for this.
vuln.c //no edits
#include <stdio… Continue reading Buffer overflow attack, getting password from locked text file
I generally zero out memory the moment it’s served its usefulness, but only with heap-allocated chunks. Is it a sin (or overkill) to do the same with arguments and stack values? Thanks in advance.
Edit:
Here’s an example of what I mean… Continue reading Is zeroing out values on the stack and arguments overkill?
Why to exploit LD_PRELOAD like is shown here https://touhidshaikh.com/blog/?p=827 in the .c file the first instruction is unsetenv(LD_PRELOAD)? Is it a routine action which all shared libraries do? Or what? I’ve tried to run … Continue reading Why in LD_PRELOAD exploit we call unsetenv(LD_PRELOAD)?