Collaborate Disseminate
Sorry if this post is in the wrong section I’m fairly new to the security field and I am new to stackexchange if this post is in the wrong section would be great if it was moved for me,also sorry if similar questions have bee… Continue reading Buffer overflow shellcode placement
Within this C code are there any notable exploitable weaknesses? I’m aware there are multiple buffer overflows, though I’m curious as to how these can be exploited where apparent.
#include <stdio.h>
#include <stdlib… Continue reading Potential buffer overflow risk in C code [on hold]
I would like to code a minimal Client-Server botnet.
Which requirements should I satisfy client side and which server side?
Continue reading Code client-server botnet in C: which requirements?
Linux memory management uses bins (double linked lists) to manage free chunks. The unlink macro given below removes a chunk from a bin, assuming that it gets a pointer P to an element of the bin.
Here are some questions:
I have the following code trying to generate a DSA key pair.
OpenSSL_add_all_algorithms();
ctx=EVP_PKEY_CTX_new_id(EVP_PKEY_DSA,NULL); EVP_PKEY_keygen_init(ctx);
if (EVP_PKEY_CTX_set_dsa_paramgen_bits(ctx,1024)<=0) … Continue reading Generating DSA key pair with openssl/libcrypto
While desktop computers have tons of computing power and storage, some small CPUs don’t have a lot of space to store things. What’s more is some CPUs don’t do multiplication and division very well. Same can be said for FPGAs. So suppose we are going to grab a bunch of three-digit decimal numbers from, say, a serial port. We want to store as many as we can, and we don’t want to do a lot of math because we can’t, it is slow, or perhaps it keeps our processor awake longer and we want to sleep to conserve power. We …read more
I hope this is the correct forum to ask for the question that I have:
We are currently discussing double-free vulnerabilities in our software security class, which is why I know the code given below is suppossed to be an exam… Continue reading Example of a double-free vulnerability in C
What do Heartbleed, WannaCry, and million dollar iPhone bugs have in common? Continue reading The Internet Has a Huge C/C++ Problem and Developers Don’t Want to Deal With It
I’ve got this simple code
vuln.c
#include <stdio.h>
#include <string.h>
int main(int argc, char** argv)
{
char buffer[500];
strcpy(buffer, argv[1]);
printf(“%s”, buffer);
return 0;
}
I am trying to perform … Continue reading How does this simple buffer overflow work?
If C uses shared libraries, is it possible to write a program that will modify the fopen function to execute a malicious code? How can the OS protect the user from this?