Collaborate Disseminate
I am currently following "Hacking: The Art of Exploitation", and I am stuck.
I am trying to fully understand the stack overflow vulnerability.
In the book, the process of overflowing is shown using a x86 architecture, I have a x6… Continue reading Unable to take control of RIP register
Specops Software released new research finding cybersecurity weaknesses in business web apps including Shopify, Zendesk, Trello, and Stack Overflow. Amid a wave of cybersecurity incidents related to the COVID-19 pandemic, remote work, and nation-state … Continue reading Popular business web apps fail to implement critical password requirements
I’ve been working with Buffer Overflow attacks, and I would like to know if there is another method for Stack-Randomization beside the ASLR method.
Continue reading which methods are used beside ASLR for Stack-Randomization?
I have the following problem: I have this C program and I have done buffer overflow using ROP gadgets. I have a problem with the output.
I want to stop the printf() call in the vuln function to get the right output but how can I achieve t… Continue reading Buffer Overflow with ROP Chain Output Problem
I tried to google this topic but most of them are conflicting each other. On the other side, I found a case where I can use either stack (local variable) or heap for a dynamic string. It’s C by the way. Any strong reference regarding this … Continue reading Stack vs Heap exploit, which have more CVE documented?
Description
Hi, I’m stucked at the Heap1 challenge from Exploit Education.
After compile the source code in a 64bits system, without any security mechanism I try to overflow the heap in order to overwrite the main return address on the s… Continue reading Heap overflow – strcpy() on x86_64 (64bit)
I’m stuck on the Heap1 challenge from Exploit Education.
After compiling the source code in a 64bit system, without any security mechanism, I try to overflow the heap in order to overwrite the main return address on the stack to control … Continue reading Heap overflow – strcpy() on x86_64 (64bit)
I was practicing stack buffer exploitation on a well known application
I was able to bypass canaries, ASLR and nx bit with techniques easily found on the internet
However it has fortify-source enabled which checks that strcpy does not copy… Continue reading What can you do against fortify-source (stack overflow)?
According to this paper on defeating stackguard, it seems canaries are placed lower in the stack (higher address) than EBP, allowing the attacker to overwrite EBP without being noticed. But when I look at more recent code it seems the cana… Continue reading Is this paper on stack canaries outdated?
I have followed some online tutorials for generating shellcode payloads using Kali Linux, which I have confirmed working by performing several attacks using it.
During my pursuit of knowledge, I have come across stack buffer overflows, suc… Continue reading Exploiting the local stack buffer overflow in cmd.exe