Tag Info

New answers tagged

5

A lot of analysis tools look for known data structures (i.e., patterns) in memory that indicate a particular type of information. For instance, malloc'd memory has header (and sometimes trailer) data that point forward and backward in memory to adjacent memory. Free'd memory pointers can jump around in memory if they aren't consolidated/coalesced. Windows ...


0

In most cases another user cannot read your environment variables. However, the well known security hole that an instance of a setuid program runs as the same user as any other instance of a setuid program can be exploited. This means that if someone runs a setuid program and someone else can exploit another program that is setuid to the same user to read ...


1

Each format parameter acts on each sequential byte. You can't use %x to read and add spaces to one of the bytes containing an address you wish to write to, because then the %n is applied to the following byte. In other words, the %x is used to read AND add the spaces. Once the spaces have been added, it's time to write that value into the address you've ...


3

I guess it depends and varies on the compiler and the system you are running on. For example what worked for me on the test code you supplied is: (on a ubuntu 32 bit machine) \x30\xa0\x04\x08\x31\xa0\x04\x08\x32\xa0\x04\x08\x33\xa0\x04\x08%154x%4$n%17x%5$n%17x%6$n%17x%7$n the first 16 bytes are the addresses I want to inject to: 0x0804a030, ...


2

You can dump the memory info using the Android Debug Bridge (ADB) by using the following command: adb shell dumpsys meminfo > mem.txt To get info for a particular app, use this: adb shell dumpsys meminfo 'your apps package name' This answer gives a detailed overview of the dumpsys tool. Do take a look. Also, this blog post explains another method to ...



Top 50 recent answers are included