|
You are here |
karmanyaah.malhotra.cc | ||
| | | | |
www.jaybosamiya.com
|
|
| | | | | Return Oriented Programming (ROP) is one of the classic exploitation techniques, that is used to bypass the NX (non executable memory) protection. Microsoft has incorporated NX as DEP (data execution prevention). Even Linux etc, have it effective, which means that with this protection, you could no longer place shellcode onto heap/stack and have it execute just by jumping to it. So now, to be able to execute code, you jump into pre-existing code (main binary,... | |
| | | | |
wachter-space.de
|
|
| | | | | This is a writeup of an easy/medium pwn challenge called "Profile" featuring a type confusion, some GOT overwriting, and a funny but unnecessary one gadget exploit for the fun of it. We are given the following files: main.c profile (binary) Dockerfile docker-compose.yml Let's look at main.c and see if we can spot a vulnerability from the provided source code. #include #include #include #include struct person_t { int id; int age; char *name; }; void get_value(const char *msg, void *pval) { printf("%s", ms... | |
| | | | |
shibumi.dev
|
|
| | | | | The personal blog of Christian Rebischke | |
| | | | |
kalbas.it
|
|
| | | We use Nix, a reproducible package manager, to provide a fixed environment with Hugo and the Hugo theme we want to use. This method does not require us to copy the theme into our repository or to add it as a submodule. | ||