Tag Info

New answers tagged

11

Your memory address 0xbffff880 is most likely non-executable, but only read/write. There are a couple of ways you can overcome this. If that is a stack address you can use -z execstack while compiling. This will essentially make the entire stack memory executable. For a more robust solution you can write the shellcode to call mprotect on the address ...


3

Yes, you normally overflow buffers without using environment variables. In fact, I'm not exactly sure how you would manage to overflow a buffer using only an environment variable. Ok, that last part is slightly facetious, you could potentially malform an environment variable to cause an overflow as well, but you can cause a buffer overflow with any ...


2

The text segment which is also called the code segment, contains the application's static functionality is not randomized by ASLR. An exploit can jump anywhere into this region of memory reliably, which permits an attacker to build a chain of ROP gadgets. The most common goal of a ROP chain is to setup a stable environment to run shell code, but that is ...



Top 50 recent answers are included