Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [heapspray]

The tag has no usage guidance.

2
votes
1answer
139 views

Heap Spray in Documents

I was watching Kevin Mitnick demonstrate the results of an exploit via Heap Spray in a PDF https://www.youtube.com/watch?v=0EKTCg7yQ_Y and was wondering what exactly is going on in the PDF and whether ...
1
vote
0answers
37 views

Why does hydraqs exploit put “abc” in its x1 array?

Here there is a thorough description of the exploit I am talking about. There is this step: var x1 = new Array(); for (i = 0; i < 200; ++i) { x1[i] = document.createElement("COMMENT"); x1[...
1
vote
0answers
86 views

Why makes many copies of the code block in Heap Spray?

I Understand that adding NOP-Sled will increase the possibility of the attack, but why do we need to add more than a copy of NOP-sled + shellcode? if we have one big NOP_sled+shellcode it will be more ...