Tagged Questions
9
votes
2answers
1k views
How “leaking pointers” to bypass DEP/ASLR works
I was wondering if anyone could give me some clues on how "leaking pointers" to bypass DEP/ASLR work. I read here:
The only way to reliably bypass DEP and ASLR is through an pointer
leak. This ...
4
votes
1answer
150 views
What attacks does a W^X policy prevent against?
Write xor Execute (W^X) is a policy that a block (page) of memory cannot be marked as both writeable and executable at the same time.
What attacks does W^X prevent, with and without the following:
...
21
votes
2answers
3k views
How do ASLR and DEP work?
How do Address Space Layout Randomisation (ASLR) and Data Execution Prevention (DEP) work, in terms of preventing vulnerabilities from being exploited? Can they be bypassed?
