Collaborate Disseminate
I wanted to exploit this code using format string vulnerability:
int jackpot;
void fmt_str(void)
{
char buf[128];
puts(“Give me a string to print”);
read(0, buf, 128);
printf(buf);
printf(“jackpot @ %p … Continue reading Format String Vulnerability – Can’t read an address from stdin with read() in C
I’m trying to exploit the following code with a buffer overflow and make it run the overflowed function:
#include <string.h>
#include <stdio.h>
void overflowed() {
printf(“%s\n”, “Execution Hijacked”… Continue reading Problem with overwriting the return address (buffer overflow)
#include <stdio.h>
int main() {
int secretInts[] = {13, 98, 4, 21};
int publicInts[] = {1,2,3,4,5,6,7,8,9};
int input, i=0;
printf(“Enter the number of intergers you want to view: “);
scanf_s(“%d”, … Continue reading Which line in this code is the source of an information disclosure vulnerability? why? how can it be fixed?
I am implementing a C++ server with a mariadb backend. I have to access my database and I do so using the mariadbpp (its c++ connector). Though I can use mysql_config_editor and store the passwords in an (encrypted) .cnf file, mariadbpp’s … Continue reading Is it secure to store my mysql password in a const std::string?
Over at $DAYJOB’s blog I’ve queued up a post that shows how to use our new opendata🔗 package to work with our Open Data portal’s API. I’m not super-sure when it’s going to be posted so keep an RSS reader fixed on h… Continue reading Quick Hit: Speeding Up a Slow/Mundane Task with a Little Rcpp
Is there a way to make a process hidden without using any Administrator-level priviledges? I am building an antivirus which I want to protect from malware’s actions, such as ending the process, or even detecting it. BTW, the … Continue reading How to hide a process in Windows?
As a layperson reading about some branches of mathematics, it often seems like mathematicians are just people who really like to create and solve puzzles. And, knowing that computer science shares a lot of its fundamentals with mathematics, we can assume that most computer scientists are also puzzle-solvers as well. This latest project from [tom7] shows off his puzzle creating and solving skills with a readable file which is also a paper, which is also a compiler for C programs, which can also play music.
[tom7] started off with the instruction set for the Intel 8086 processor. Of the instructions …read more
How is shellcode (the payload) added to an executable file? Assume it is close source.
How does the hacker then get the address of where it is? They need this for when they overwrite the return address…
After the above is… Continue reading How is executable shellcode inserted?
In this 35C3 talk, it is said that while it is possible to manually inspect whether a package optimizes away memset() that clears sensitive memory, doing it automatically would be challenging. Assuming that the binary is comp… Continue reading What makes detection of optimized-away memory clearing non-trivial?
Somewhere I saw this malformed C++ program could make g++ generate a huge error log:
int main()
{
struct x struct z<x(x(x(x(x(x(x(y,x(y><y*,x(y*w>v<y*,w,x{};
return 0;
}
By repeating (x many times, t… Continue reading Why does g++ generate huge error log? [migrated]