/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

karmanyaah.malhotra.cc
| | www.jaybosamiya.com
6.1 parsecs away

Travel
| | Return Oriented Programming (ROP) is one of the classic exploitation techniques, that is used to bypass the NX (non executable memory) protection. Microsoft has incorporated NX as DEP (data execution prevention). Even Linux etc, have it effective, which means that with this protection, you could no longer place shellcode onto heap/stack and have it execute just by jumping to it. So now, to be able to execute code, you jump into pre-existing code (main binary,...
| | wachter-space.de
6.0 parsecs away

Travel
| | This is a writeup of an easy/medium pwn challenge called "Profile" featuring a type confusion, some GOT overwriting, and a funny but unnecessary one gadget exploit for the fun of it. We are given the following files: main.c profile (binary) Dockerfile docker-compose.yml Let's look at main.c and see if we can spot a vulnerability from the provided source code. #include #include #include #include struct person_t { int id; int age; char *name; }; void get_value(const char *msg, void *pval) { printf("%s", ms...
| | shibumi.dev
4.8 parsecs away

Travel
| | The personal blog of Christian Rebischke
| | kalbas.it
46.5 parsecs away

Travel
| We use Nix, a reproducible package manager, to provide a fixed environment with Hugo and the Hugo theme we want to use. This method does not require us to copy the theme into our repository or to add it as a submodule.