Collaborate Disseminate
I’m trying to put together a ROP chain. I’m looking for a gadget to do the following:
mov rdi, rdx ; mov rbp, rsp ; ret;
But instead, I have a gadget like this :
mov rdi, rdx ; mov rbp, rsp ; jmp 0x8109b3f7
So, I thought maybe I c… Continue reading How to use "jmp" in ROP
Congratulations, you have just finished assembling your electronics project. After checking for obvious problems you apply power and… it didn’t do what you wanted. They almost never work on the first try, and thus we step into the world of electronics debugging with Daniel Samarin as our guide at Hackaday …read more
I am trying to complete level 3 of buffer bomb lab. The task is to supply an exploit string that will cause getbuf to return my cookie (0x4b64b076) back to test, rather than the value 1. The exploit code should set the cookie as the return… Continue reading Buffer bomb level 3 – Prevent stack corruption
Do you even snarf?
If not, it might be because you haven’t mastered the basics of JTAG and learned how to dump, or snarf, the firmware of an embedded device. This JTAG primer will get you up to snuff on snarfing, and help you build your reverse engineering skills.
Whatever …read more
I have this error while I am debugging using winDBG :
**
Unable to retrieve information, Win32 error 0n30: Lecture impossible
sur le périphérique spécifié.
**
Continue reading Error on WinDBG : Win32 error 0n30 [closed]
I have a problem when I try to debug services using WinDBG and GFLAGS.
Here’s some screen shots resuming my problem. First, I configured GFLAGS like this:
Then, I launched the service, and used the following command:
And finally, … Continue reading Problem while debugging services with WinDBG using GFLAGS
It’s amazing to see how much technology is packed into even the “simple” devices that we take for granted in modern life. Case in point, the third party Xbox controller that [wrongbaud] recently decided to tear into. Not knowing what to expect when he cracked open its crimson red case, …read more
Continue reading Xbox Controller Provides Intro to SWD Hacking
[Enddrift] had a real problem trying to run a classic game, Hello Kitty Collection: Miracle Fashion Maker, into a GBA (Gameboy Advance) emulator. During startup, the game would hit an endless loop waiting for a read from a non-existent memory location and thus wouldn’t start under the emulator. The problem …read more
Continue reading The Multiyear Hunt for a Gameboy Game’s Bug
A recent post about debugging constructs surprised me. There were quite a few comments about how you didn’t need a debugger, as long as you had printf. For that matter, we’ve all debugged systems where you had nothing but an LED to flash or otherwise turn on to communicate …read more
I’m preparing for an introductory information security examination in university and this is one of the examination questions on Secure Programming.
In such questions, I would usually catch for Buffer Overflow or Integer Ove… Continue reading Exploiting vulnerabilities in the C code