177 reputation
19
bio website
location UAE
age
visits member for 2 years, 6 months
seen Jul 23 at 18:03

Jul
23
awarded  Caucus
May
1
awarded  Commentator
May
1
awarded  Editor
May
1
revised Exploiting a desktop application
clarify meaning
May
1
comment Exploiting a desktop application
Thanks for the answer.Is it Nessus, you mentioned by finding the programs installed on that computer? I think it listens to open ports, am I wrong?
May
1
comment Exploiting a desktop application
Thanks for the answer. Nice explanation :)
May
1
accepted Exploiting a desktop application
May
1
comment Exploiting a desktop application
any kind of of attack related to desktop application is acceptable. I gave it as an example. If you give general view about attacks to desktop applications it would be better.
May
1
asked Exploiting a desktop application
Mar
3
awarded  Notable Question
Jan
31
awarded  Nice Question
Jan
31
comment Why is it dangerous when an attacker can control the `n` parameter to `memcpy()`?
That is a really good point. Actually, the paper I was reading was about bypassing iOS security (as you might have seen).
Jan
30
comment Why is it dangerous when an attacker can control the `n` parameter to `memcpy()`?
@immibis, i didnt think of it much.
Jan
29
comment Why is it dangerous when an attacker can control the `n` parameter to `memcpy()`?
@GuntramBlohm, yes, I learnt it s not giving any exception thanks to Michael Kjorling
Jan
29
awarded  Popular Question
Jan
29
accepted Why is it dangerous when an attacker can control the `n` parameter to `memcpy()`?
Jan
29
awarded  Custodian
Jan
29
reviewed Approve Why is it dangerous when an attacker can control the `n` parameter to `memcpy()`?
Jan
29
comment Why is it dangerous when an attacker can control the `n` parameter to `memcpy()`?
Does it also mean by changing attacker_controllable_value can the attacker move anywhere in the stack if s/he doesn't violate any page protection? For example can s/he get callee save registers if s/he knows data size of the things above it?
Jan
29
asked Why is it dangerous when an attacker can control the `n` parameter to `memcpy()`?