Collaborate Disseminate
I’m going through the various overthewire wargames and I have a question about narnia0. The code in c contains
if(val==0xdeadbeef)
system(“/bin/sh”);
else {
printf(“WAY OFF!!!!\n”);
I got it to work with the simple buffer … Continue reading Shell not always escalating privileges in narnia
I’m interested in security stuff and I want to start with Android devices to test this OS. I’ve seen that there are many exploits for Android (the most famous is the StageFright case) and I’m also curious to start developing … Continue reading How to debug a particular .c or .cpp file of AOSP?
int play() {
int a;
int b;
char buffer[010];
a = 0x41414141;
b = 0x42424242;
if (write(STDOUT_FILENO, “For a moment, nothing happened. Then, after a second or so, nothing continued to happen.\n> “… Continue reading Buffer Overflow: Advice on exploiting
Debugging startup Backtrace I/O was launched to solve a real problem that its founders faced when they were engineers at adtech company AppNexus — at least according to Backtrace CEO and co-founder Abel Mathew. Mathew told me Backtrace aims to “solve the process of debugging,” something that most companies tackle by “cobbling together very old, outdated solutions”… Read More Continue reading Backtrace, a debugging startup led by former AppNexus engineers, raises $5M
I am trying to follow a exploit development tutorial with slmail with pass field containing buffer overflow bug. When I attach immunity debugger to slmail process it terminates thread. I tried attaching freefloat ftp server i… Continue reading Immunity debugger terminates thread when attaching process
Sometimes there’s just no substitute for the right diagnostic tool. [Ankit] was trying to port some I2C code from an Arduino platform to an ARM chip. When the latter code wasn’t working, he got clever and wrote a small sketch for the Arduino which would echo each byte that came across I2C out to the serial line. The bytes all looked right, yet the OLED still wasn’t working.
Time to bring out the right tool for the job: a logic analyzer or oscilloscope. Once he did that, the problem was obvious (see banner image — Arduino on top, ARM on …read more
I should really like I2C more than I do. In principle, it’s a brilliant protocol, and in comparison to asynchronous serial and SPI, it’s very well defined and clearly standardized. On paper, up to 127 devices can be connected together using just two wires (and ground). There’s an allowance for multiple clock-masters on the same bus, and a way for slaves to signal that the master to wait. It sounds perfect.
In reality, the tradeoff for using only two wires is a significantly complicated signalling and addressing system that brings both pitfalls and opportunities for debugging. Although I2C does reduce …read more
Serial Peripheral Interface (SPI) is not really a protocol, but more of a general idea. It’s the bare-minimum way to transfer a lot of data between two chips as quickly as possible, and for that reason alone, it’s one of my favorites. But that doesn’t mean that everything is hugs and daffodils. Even despite SPI’s simplicity, there are still a few ways that things can go wrong.
In the previous article in this series, inspired by actual reader questions, I looked into troubleshooting asynchronous serial connections. Now that you’ve got that working, it’s time to step up to debugging your …read more
A Berkeley postdoctoral researcher and former MIT student will soon unveil Space, a static-analysis web-application security tool that can find vulnerabilities in a minute. Continue reading New MIT Scanner Finds Web App Flaws in a Minute
There’s a reason corporations pay big money for bugs. Continue reading The Agony and the Ecstasy of Debugging Code
