Collaborate Disseminate
I have been conducting some minor research into the various forms of exploitation, such as buffer overflows and similar.
Most tutorials seem to focus on executing shellcode, that is code which executes a shell. I was wondering if the cause… Continue reading What is the maximum payload injection size
Aerodox Flies on Wireless Wings [Simon Merrett] didn’t know anything about keyboards when he started this project, but he didn’t let that stop him. [Simon] did what any of us …read more Continue reading Keebin’ with Kristina: the One With the Curved Typewriter
Dangling pointer(heap)
Use After Free(heap)
Double Free(heap)
Off by one(stack)
Integer Overflow(stack)
Unused Variable(stack and heap)
underrun(stack and heap)
race condition(stack and heap)
From what I’ve seen unused variable and under… Continue reading What are some exploitable memory corruption attacks I have not listed?
I have the following program:
#include<stdio.h>
int main() {
int i=0;
foo();
printf("Hello there!");
func();
}
int foo(void) {
char str[14];
strncpy(str,"General Kenobi", 14)
prin… Continue reading Trouble understanding buffer overflow to print a string
I want to try some ret2Libc but it doesnt open my shell with the system command.
Here is my exploitable Code:
int main(int argc, char **argv)
{
char buffer[64];
gets(buffer);
}
Now i wrote a simple python exploit:
import struct
padding=… Continue reading Ret2Libc Bufferoverflow system command isnt working
There are a bunch of newly minted millionaires this week, after it was announced that Stack OverFlow would be acquired for $1.8 billion by European tech investment firm Prosus. While …read more Continue reading Hackaday Links: June 6, 2021
I have been trying to understand the code and find a way to fill ovfbuf buffer (FOR loop), so after the buffer overflow it overwrites the main method return address and redirects to envp[0], which is filled with NOP and the SHELLCODE. I am… Continue reading Fill Overflow buffer to change return address. Buffer overflow exploit
I see that intel and other hardware companies have spend a lot of effort introducing the shadow stack in intel cet.
The questions is of course why? canary gives similar functionality , and according to some benchmarks takes by performance…. Continue reading why shadow stack if I can canary?
So I hope I’m phrasing this right. I’m trying to exploit a piece of c code which you can see below.
#include <stdlib.h>
#include <unistd.h>
#include <stdio.h>
#include <string.h>
int user_age;
void secretClub(){
… Continue reading Can you perform a buffer overflow and a format string attack at the same time?
If I compile a code with gets, the compiler outputs a warning saying that the function shouldn’t be used:
<source>:5:13: warning: ‘char* gets(char*)’ is deprecated [-Wdeprecated-declarations]
gets(buf);
^
In file in… Continue reading Why does my compiler warn me about gets but not about scanf?