Collaborate Disseminate
How is shellcode (the payload) added to an executable file? Assume it is close source.
How does the hacker then get the address of where it is? They need this for when they overwrite the return address…
After the above is… Continue reading How is executable shellcode inserted?
In this 35C3 talk, it is said that while it is possible to manually inspect whether a package optimizes away memset() that clears sensitive memory, doing it automatically would be challenging. Assuming that the binary is comp… Continue reading What makes detection of optimized-away memory clearing non-trivial?
Somewhere I saw this malformed C++ program could make g++ generate a huge error log:
int main()
{
struct x struct z<x(x(x(x(x(x(x(y,x(y><y*,x(y*w>v<y*,w,x{};
return 0;
}
By repeating (x many times, t… Continue reading Why does g++ generate huge error log? [migrated]
Sorry if this post is in the wrong section I’m fairly new to the security field and I am new to stackexchange if this post is in the wrong section would be great if it was moved for me,also sorry if similar questions have bee… Continue reading Buffer overflow shellcode placement
Within this C code are there any notable exploitable weaknesses? I’m aware there are multiple buffer overflows, though I’m curious as to how these can be exploited where apparent.
#include <stdio.h>
#include <stdlib… Continue reading Potential buffer overflow risk in C code [on hold]
I would like to code a minimal Client-Server botnet.
Which requirements should I satisfy client side and which server side?
Continue reading Code client-server botnet in C: which requirements?
Linux memory management uses bins (double linked lists) to manage free chunks. The unlink macro given below removes a chunk from a bin, assuming that it gets a pointer P to an element of the bin.
Here are some questions:
I have the following code trying to generate a DSA key pair.
OpenSSL_add_all_algorithms();
ctx=EVP_PKEY_CTX_new_id(EVP_PKEY_DSA,NULL); EVP_PKEY_keygen_init(ctx);
if (EVP_PKEY_CTX_set_dsa_paramgen_bits(ctx,1024)<=0) … Continue reading Generating DSA key pair with openssl/libcrypto
While desktop computers have tons of computing power and storage, some small CPUs don’t have a lot of space to store things. What’s more is some CPUs don’t do multiplication and division very well. Same can be said for FPGAs. So suppose we are going to grab a bunch of three-digit decimal numbers from, say, a serial port. We want to store as many as we can, and we don’t want to do a lot of math because we can’t, it is slow, or perhaps it keeps our processor awake longer and we want to sleep to conserve power. We …read more
I hope this is the correct forum to ask for the question that I have:
We are currently discussing double-free vulnerabilities in our software security class, which is why I know the code given below is suppossed to be an exam… Continue reading Example of a double-free vulnerability in C