4
votes
2answers
193 views

Smashing the stack if it grows upwards

As we know that on most of the processor architectures, the stack grows downwards. Hence, memory exploits involving smashing of stack and buffer overflow and their explanation make sense. Just ...
3
votes
1answer
76 views

Exploiting memory corruption issues using a DLL file

I was listening to a talk on Return Oriented Exploitation from the Black Hat 2010 conference. The speaker mentioned something about using the DLLs to exploit some of the memory corruption issues. I ...
0
votes
1answer
239 views

Stack buffer overflow confusion

I am trying to dig deeper into the nuts and bolts a stack buffer overflow using the classical NOP-sled technique. Reading some articles and watching videos brought me to a confusion which can be ...
3
votes
1answer
253 views

A simple example for showing the use of Data Execution Prevention (DEP) security feature

I am finding it really hard to figure out why we need a DEP! Microsoft states this about DEP: The primary benefit of DEP is to help prevent code execution from data pages. Typically, code ...
3
votes
1answer
103 views

How can one gain additional privileges from being able to read kernel memory?

Given the ability to read (but not write) arbitrary kernel memory as an unprivileged user, what approaches might one take to gain additional privileges on the system? Ignoring the 'trivial' method of ...
3
votes
1answer
457 views

Two questions about learning Linux exploit development fundamentals

getting ready to delve into the technical world of vulnerability assessment, and I have two questions about where to find certain information. First, I plan on reading "Understanding the Linux ...