Questions tagged [memory]

Computer memory refers to a physical device that is used to store sequences of instructions (programs) or data (program state information) on a temporary or permanent basis for use in a computer.

Filter by
Sorted by
Tagged with
0 votes
0 answers
25 views

Third party wants full core dump of crashing app - safe?

(I've researched this beforehand but cannot find a similar enough question, hence this one). I have a plugin for Visual Studio that crashes; the vendor has asked me to upload a minidump with heap of ...
user avatar
  • 101
0 votes
1 answer
41 views

XD/NX Bit in UNIX [Memory Security]

I have been reading about XD/NX bit used in Memory Pages for security. I understand it is a security feature that can help reduce system exposure to viruses and malicious code. If enabled, processor ...
user avatar
0 votes
0 answers
49 views

Is it possible to inject code using physical memory access to jailbreak phones?

Is it possible to inject code into RAM using physical access? For example desolder the RAM chips, solder something between the original RAM chip and the phone motherboard, and use that to directly ...
user avatar
1 vote
0 answers
48 views

Cold boot attack on NAS

I'm familiar with the concept of cold boot attacks on laptop and desktop computers, where the goal is to find hidden encryption keys in the memory. I also think it's done on certain mobile phones. I ...
user avatar
1 vote
0 answers
52 views

C - Remote string format attack exploit - %n Does not seem to write anything on the stack

[As part of a ctf] I am trying to exploit a remote server through a tcp connection. The server is using snprintf() and provides user input as the formatting string. My goal is to dump the stack. ...
user avatar
0 votes
1 answer
59 views

What does leak in memory/info leaks?

When a binary is running and there is some memory/info leak are there areas of program (or OS?) memory which are more prone to leak and is a leak in one segment worse than in another segment?
user avatar
1 vote
1 answer
52 views

Finding Officejet 8600's bulit-in RAM

Before I give away my dead HP Officejet 8600 Pro for recycling, I want to ensure that no memory remains on it. Even after extensive research, it's not easy to find conclusive information on whether a ...
user avatar
  • 13
2 votes
1 answer
76 views

Child processes vs microservices for communication between components

This is a question for operating system security experts. We have an application using one platform/language, and it has to integrate with a library that uses another platform/language. There is no ...
user avatar
  • 234
0 votes
0 answers
84 views

64 Bit ELF Buffer Overflow Not working possibly due to if statement

I wrote the following: #include <stdio.h> int win(){ printf("Won!\n"); return 0; } int vulnerable(){ char buffer[20]; memset(buffer, 0, 10); printf("Input: &...
user avatar
2 votes
1 answer
563 views

Memory encryption against memory leaks

Will memory encryption (or compression) provided by Intel or AMD processors protect against attacks like HeartBleed or similar memory leaks?
user avatar
0 votes
0 answers
81 views

"Intercepting" executable with FTK Imager

I want to analyze the traces of a program in my VM by executing it and then capturing the memory and disk using FTK Imager. However, it looks like --given the environment I have-- the program only ...
user avatar
2 votes
1 answer
197 views

Does Intel's vPro TME make a locked screen more secure?

This post seems on point but I didn't understand the answer enough to answer this question. Intel's vPro offers "Total Memory Encryption" (TME), which encrypts RAM and system bus data while ...
user avatar
  • 21
-1 votes
1 answer
156 views

code and memory safety issues

I'm preparing for a computer security exam, and I found this question in previous exams To create an authentication program, we write a check_auth function as follows: int check_auth(char *password) {...
user avatar
  • 3
0 votes
1 answer
149 views

Buffer overread

I am trying to understand buffer overread in my course in school. This code is an example from one of the lectures where buffer overread can be a problem. However, I do not understand how buffer ...
user avatar
2 votes
1 answer
213 views

What does Snowden mean by "majority of vulnerabilities ... are introduced, for technical reasons ..., at the exact time the code is written"?

In a recent Substack article ("The Insecurity Industry", 2021-07-26) Edward Snowden writes: The vast majority of vulnerabilities that are later discovered and exploited by the Insecurity ...
user avatar
  • 43.7k
1 vote
2 answers
209 views

Create memory image of infected machine without risk

I am pretty new in the security world and I am writing a procedure on how to create a memory image of an infected machine for forensics. The problem is that the machine does not have the tools for ...
user avatar
3 votes
0 answers
147 views

Process Injection and Process Isolation by OS

If the OS is responsible for ensuring that one process cannot access another process memory space, and the point of process isolation is to keep processes separate from one another, then how can a ...
user avatar
0 votes
1 answer
125 views

Memory Forensics on exited process

I am new to memory forensics. When a process in Windows is ended are all artifacts for the process in memory gone? I ask because my EDR solution gives me the local process ID of a process I am ...
user avatar
0 votes
0 answers
81 views

How useful are memory forensic tools for detecting active attacks (considering current devices)

Are memory forensic tools useful for attack detection? Usually they are applied after an attack has happened. You could always constantly scan a machine but this requires lots of resources and ...
user avatar
0 votes
1 answer
781 views

Disable memory scrambling [closed]

Is it possible to disable memory scrambling for RAM? Can you change what kind of algorithm is used? Can you check from inside the OS which is using the memory if/what scrambling is in use? Do devices ...
user avatar
1 vote
1 answer
138 views

How do memory resident viruses work?

Two part question: 1-How do memory resident viruses stay in memory after the program which loaded them is finalized? If all memory is automatically deallocated by the OS once a program is finished, ...
user avatar
  • 113
0 votes
3 answers
188 views

How to donate a computer without jeopardizing personal information?

I have an old computer that is no longer working and I want to donate it or perhaps throw it in the trash. However, I don't want people to potentially get my banking account data, usernames/passwords ...
user avatar
5 votes
2 answers
2k views

Since GPUs have gigabytes of memory, does Argon2id need to use gigabytes of memory as well in order to effectively thwart GPU cracking?

The common advice of benchmarking a password hashing algorithm and choosing the slowest acceptable cost factor doesn't work for algorithms with more than one parameter: adding a lot of iterations at ...
user avatar
  • 31.8k
1 vote
0 answers
71 views

Can XIP (execute in place) be used for kernel protection?

Starting with kernel 5.13 RiscV will get XIP where parts of the kernel run from non volatile memory like flash. In theory you could make parts of the kernel really read only either from the hardware ...
user avatar
  • 11
1 vote
1 answer
200 views

Is uninitialized memory considered sensitive?

Consider a program that can allocate and read uninitialized memory regions, e.g. for performance reasons. Should said program assume that those regions may contain sensitive information, or is it the ...
user avatar
2 votes
1 answer
232 views

Is this malloc wrapper safe?

I am trying to stop integer overflow vulnerabilities by creating a simple wrapper around malloc(3) and related functions. The idea is that it returns a NULL pointer if the amount of required memory ...
user avatar
  • 166
66 votes
3 answers
17k views

Are the sticks of RAM in my desktop computer volatile? Is it safe to sell them?

I have two sticks of RAM in my computer that I would like to sell or donate. From what I understand some RAM is volatile, losing all its contents when power is gone for a few minutes, and some is non-...
user avatar
1 vote
0 answers
101 views

Question on stack overflow

I am preparing for an exam in Computer Security and doing a past-exam without soluions, so I wanted to check if my reasoning holds on a question about stack overflow. Below is the C code in question. ...
user avatar
  • 23
1 vote
0 answers
218 views

Finding NonPagedPool Start and End Address using volatility

I am exploiting bluekeep vulnerability in windows server 2008 R2 using metasploit framework. When I run the exploit windows/rdp/cve_2019_0708_bluekeep_rce, it ends in BSOD on server and then server ...
user avatar
  • 201
1 vote
1 answer
166 views

The hidden meaning of the source code of the malware?

I'm studying the source code of malware developed in c++ and I have two questions in the source code below This is probably code that loads malicious dlls into memory. typedef BOOL (WINAPI *...
user avatar
0 votes
1 answer
205 views

Assigning memory address of shellcode to buffer (for buffer overflow input)

I am attempting to exploit HEVD kernel driver buffer overflow challenge: https://github.com/hacksysteam/HackSysExtremeVulnerableDriver However when running the below code my windows 7 machine doesn't ...
user avatar
0 votes
1 answer
234 views

Do modern GPUs have memory protection?

What mechanisms (if any) modern GPUs implement to prevent different processes from accessing each other's memory (on graphics card)?
user avatar
  • 101
0 votes
0 answers
94 views

(When) Is it a security concern if BIOS/UEFI uses/reserves much RAM?

BIOS, UEFI and hardware's firmware ROMs are not very comforting sources for concern. On a system that I administer, a large amount of main system memory (9 of 512GB) is unavailable. Next to the ...
user avatar
  • 101
0 votes
0 answers
82 views

Authenticate Windows/Linux process against hardware security module

I have a hardware security module connected to a host computer (Windows/Linux). The HSM contains symmetric keys used to encrypt/decrypt data (i.e. files and real-time communications); the keys are ...
user avatar
0 votes
1 answer
192 views

"Memory-Hard" vs. "Memory-Bound" Functions?

One of the approaches in order to prevent Sybil or DoS attacks is CPU-bound PoW. However, because of the influence of Moore’s law, the memory-based approaches are suggested. As actually there are two ...
user avatar
  • 1,247
1 vote
1 answer
249 views

Memory address problem in GNU Debugger

I'm new to gbd. I've wrote a simple program which will print hello world 10 times(I've listed the program in the screenshot). Then I've displayed the assembly language and set the break point to main ...
user avatar
9 votes
1 answer
5k views

In-memory pepper

As far as I understand, a problem with the idea of a pepper is that, if it's stored as part of your code, then the hacker can read it if they can access your code. So I was wondering, would it not be ...
user avatar
  • 327
62 votes
15 answers
17k views

Emergency method to erase all data off a machine within seconds

Imagine you are carrying highly sensitive information with you, maybe on a mission in a war zone. You get in an ambush and quickly need to erase all the files before they fall in the wrong hands. This ...
user avatar
2 votes
1 answer
528 views

Format string exploit length

I'm new to Software security and I'm studying it now at the university. I had some doubts about the Format String exploit, in particular how to count the length (in number of bytes) of a format string ...
user avatar
1 vote
0 answers
181 views

Process hollowing and the Import Address Table

I have been learning and implementing Process Hollowing attacks, and even after I got the thing work, I have some questions. Why aren't we building the IAT when we load our injected PE? All we do is ...
user avatar
0 votes
1 answer
109 views

How to safely handle non public data in memory

Alice needs to get non public information from Bob, validate it (let's say check that birth day is between 1900 and now) and forward it to Charlie. There's an end to end encryption between Alice and ...
user avatar
2 votes
1 answer
124 views

Is it trivial to protect from double free just by LD_PRELOADing a custom malloc/calloc and free?

Can't one just implement a malloc/calloc wrapper that adds the returned pointer address to a global hash table prior to returning, and then a free wrapper that checks for the presence of the pointer ...
user avatar
  • 23
0 votes
1 answer
479 views

How to build Linux Volatility Profiles With the Compiled Kernel

I'm familiar with creating Linux memory profiles as stated here. However, this is assuming that I have access to the live system which often times is not the case. I heard there is a way to build the ...
user avatar
0 votes
2 answers
381 views

How to get a Windows 10 complete memory dump on demand?

I was wondering what to do if by any chance I got infected with a Ransomware that could trick my AV suite, and my conclusion is that a complete memory dump would be the best option, as probably the ...
user avatar
2 votes
1 answer
235 views

How to use "jmp" in ROP

I'm trying to put together a ROP chain. I'm looking for a gadget to do the following: mov rdi, rdx ; mov rbp, rsp ; ret; But instead, I have a gadget like this : mov rdi, rdx ; mov rbp, rsp ; ...
user avatar
  • 31
1 vote
0 answers
94 views

Kernel ROP crashes running OS

I was experimenting to see if I can make an ROP chain within the kernel. In the kernel debugging mode, I can make the first jump to an arbitrary gadget address without any problem. But the problem ...
user avatar
  • 31
1 vote
0 answers
124 views

"Trusted memory" What does it mean?

It is often cited "to load from untrusted memory to a trusted system memory" when describing the secure boot process. I wonder, when can we consider a memory as "trusted"?
user avatar
  • 259
0 votes
0 answers
179 views

Bypassing Secure Boot in System on Chip

To bypass a secure boot for System on Chip (SoC), some attacks target the phase of copying the bootloader from where it is stored to the main memory. Instead, a malicious code will be copied to the ...
user avatar
  • 259
2 votes
1 answer
245 views

Tamper Protected VS. Tamper Proof for write-protected memories

I read in the answer here by Marcus that ROM is Tamper-proof. What is the difference between tamper-proof, tamper protected and tamper-resistant? Now, there are some re-writable memory (eg. eNVM) ...
user avatar
  • 259
0 votes
2 answers
632 views

Find Buffer Overflows at a target you want to gain access

I want to pass my OSCP exam and I am learning with the material I got. I watched the videos and read the pdf but I have a question about buffer overflows. In the example in the videos, the guy has ...
user avatar
  • 23

1
2 3 4 5
7