New answers tagged

0

It's dangerous. Is it exploitable? Possibly. You've already told us that you can cause a crash, so you may be able to DoS a system by crashing it... depending upon where argv1 comes from. If it's a hard coded value, or if it's generated by a calling app and can only ever be between 0 and 20, then it may not be exploitable in the system. It would still be a ...


0

Yes You don't need to use -1, any value larger than 20 will allow you to overflow the buffer. It will depend on the next instructions and the mitigations set by the compiler, but from this point on you can probably overwrite the return address and execute a shell code provided as the second parameter.


1

There are two threat models here: Malicious developer uploading malicious packages Malicious attacker uploading malicious packages that belongs to legitimate developers PyPI does not make any attempt to try to resolve #1. Auditing code before installs and only installing packages from reputable developers are the only "protection" you have against these. ...


5

As a developer of 15 years who has moved into a pen-test role, I can say that yes there are many transferable skills, some of which will put you at and advantage to testers who came from a pure security background. Firstly and foremostly you understand the developer mindset, this means that you probably understand why a developer chose a particular ...


2

I'm a developer and I do network security as side business. I have a long time since I started developing so after learning the basics about security I wanted to learn more. After several years now, I keep learning about network security. Ideally, developers need to know as much as possible about security, but they don't really need to enter in too much ...



Top 50 recent answers are included