/explore
|
You are here 
|
karmanyaah.malhotra.cc | ||
| | | | |
www.willsroot.io
Vulnerability Research on Low-Level Systems |
|
| | | | | ||
| | | | |
wachter-space.de
This is a writeup of an easy/medium pwn challenge called "Profile" featuring a type confusion, some GOT overwriting, and a funny but unnecessary one gadget exploit for the fun of it. We are given the following files: main.c profile (binary) Dockerfile docker-compose.yml Let's look at main.c and see if we can spot a vulnerability from the provided source code. #include #include #include #include struct person_t { int id; int age; char *name; }; void get_value(const char *msg, void *pval) { printf("%s", ms... |
|
| | | | | ||
| | | | |
www.jaybosamiya.com
Return Oriented Programming (ROP) is one of the classic exploitation techniques, that is used to bypass the NX (non executable memory) protection. Microsoft has incorporated NX as DEP (data execution prevention). Even Linux etc, have it effective, which means that with this protection, you could no longer place shellcode onto heap/stack and have it execute just by jumping to it. So now, to be able to execute code, you jump into pre-existing code (main binary,... |
|
| | | | | ||
| | | | |
securehoney.net
My book review of a fascinating journey into the world of programming, exploitations, buffer overflows, shellcode, cryptology, and more. |
|
| | | |||
