Tag Info

New answers tagged

1

I understand it is a bit late for your assignment ;) but for other students who may be groping in the dark with similar problem, here goes... Python is written in C, and the C executable is throwing the segmentation fault error. To understand segmentation fault you need to run Python itself in gdb (GNU Debugger assuming you are on Linux/Unix) and then pass ...


3

Limiting text in an HTML form doesn't really stop buffer overflows because a bad actor can edit your HTML or not use it at all. Buffer overflow vulnerabilities are caused by programming errors. Programs processing the data on the server must, if using fixed size buffers, count characters as they're stored and store no more than the allocated number of ...


1

The answer is the same for both scenarios, you need to add a length validation for the input on the server side before you do any other operation with the data. Whitelisting for only safe characters (A-Z,a-z,0-9) also helps avoid attacks that take advntage of buffer overflows in order to execute arbitrary code. a link for further reference: ...


0

Since /bin/sh is actually another process, gdb is unable to debug that branched process. But it doesn't sound like you actually need to be debugging /bin/sh since you are just running shellcode. Actually seeing that your exploit can make another process start should indicate that your exploit was successful. You could also check out this post as well: ...


0

Here is an example that shows how this overflow can help you. Imagine you don't have access to the private members (pwd for example) so printf will help you see the content of this variable #include <iostream> #include <stdio.h> #include <string.h> using namespace std; struct SecureLogin{ SecureLogin(const char * login_) { ...


1

You assumption is wrong. you don't need to use the full 4 byte address of the FP. Since your CPU will understand the thumb mode. as a result your exploit will look like : printf "AAAABBBBCCCC\x94\xac\x8b\xbe\[FP 2 bytes without \x00\x00 here]\x38\x84"



Top 50 recent answers are included