Questions tagged [memory]

Computer memory refers to a physical device that is used to store sequences of instructions (programs) or data (program state information) on a temporary or permanent basis for use in a computer.

Filter by
Sorted by
Tagged with
0
votes
2answers
135 views

Find Buffer Overflows at a target you want to gain access

I want to pass my OSCP exam and I am learning with the material I got. I watched the videos and read the pdf but I have a question about buffer overflows. In the example in the videos, the guy has ...
0
votes
0answers
38 views

Why do memory dump sizes on some machines not correlate with the amount of RAM? [closed]

I'm using winpmem to do some memory dumps. I did a test run on my workstation and the files was about 32GB, exactly what I expected since I have 32 gigs of RAM. However, on other machines the output ...
0
votes
1answer
53 views

Protect sensitive data in memory

Is there a way to protect sensitive data which is in RAM? Our setup is a microcontroller with no hardware support for security. When there is a need to encrypt data, then the secret key exists in RAM. ...
3
votes
1answer
120 views

Read-only vs. Write-protected

From an information security aspect, is there a difference between saying "read-only" or "write-protected" storage/memory? Is there a chance that a read-only memory would not be write-protected at ...
0
votes
1answer
54 views

In what ways can the contents of RAM be (inadvertently) written to disk?

I'm working on improving the security of my own system by mitigating the chance sensitive information, (e.g. encryption keys) stored in RAM, are inadvertently written to disk. As of now I know of ...
0
votes
0answers
40 views

Live Memory Analysis

I'm a developer working on a POC for an internal web app (Python\SQL) which will handle sensitive employee information within our company. In going over the application with our security department to ...
2
votes
1answer
169 views

What are the security implications of invalid free()?

CVE-2009-5030 OpenJPEG: Heap memory corruption leading to invalid free The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (...
1
vote
0answers
187 views

Volatility: Issue with analyzing Windows 10 and Server 2016 systems

I have been trying to use Volatility 2.6 to analyze memory dumps generated by DumpIt. I am experiencing an issue analyzing the memory dumps (all 4 GB in size) of two Windows 10 64 bit boxes (build ...
2
votes
1answer
62 views

Access to foreign memory address

Question is pretty simple. Modern operating system like windows 10 isolates memory addresses for his processes so ... how is possible that Cheat Engine can gets these address and changing their values ...
1
vote
1answer
54 views

Security in memory and between local windows processes over localhost

I have a windows application that runs in 2 processes and communicates over localhost network port. This application can hold secrets, such as a web cookie. I'm trying to think through the security ...
2
votes
1answer
85 views

Countering a system killing UID/GID=0 processes in Android

Suppose that there were a security system in an Android kernel meant to prevent exploits that have arbitrary kernel memory read/write from getting root privileges. This system, Kills a process by ...
2
votes
2answers
175 views

Why does Windows allow non-parent processes to read/write the memory of a process?

I recently learned that in Windows a process is generally allowed to alter the the memory of another process as long as it is running under the same user. I tried running the following code with ...
1
vote
0answers
195 views

Find out if a process is legitimately allowed to use “shared memory segments”

rkhunter is checking for processes using shared memory segments and warns with output like: Warning: The following suspicious (large) shared memory segments have been found: Process: /usr/bin/python3....
3
votes
0answers
61 views

Zeroization of sensitive data in Functional Programming Languages

Concerning the very familiar (and sensible) security practice of Zeroizing sensitive data from memory after you're finished with it, such as Cryptographic keys, passwords, etc, I was pondering how you ...
0
votes
0answers
46 views

How to extract cluster data for a jpeg image using autopsy

How do I find the exact partition of an image evidence in the hard drive that is being investigated? I know autopsy has a tool for it but I can't find it anywhere.
1
vote
0answers
93 views

Why can leaking a kernel pointer be dangerous? [closed]

Which attacks can be executed with a leaked pointer?
1
vote
0answers
66 views

Is a Buffer Overflow / NOP Slide possible for memory addresses that contain null bytes?

I have been reading up on Buffer Overflows and NOP Sleds. I tried to use the exploit on an example target and I got stuck because I needed to inject a null byte in the return address for my BP so that ...
0
votes
0answers
101 views

What is the method police use to recover deleted data from phone memory?

I am writing a story that involves a cellphone being recovered at a crime scene. The police go through it and find all the non-deleted files and continue until a they do something to obtain the data ...
2
votes
0answers
52 views

What are the major security differences between jemalloc and mozjemalloc?

In a rather heated mailing list thread, I read some information provided by one of the developers of mozjemalloc, the memory allocator in Firefox that was forked from jemalloc, that stated that the ...
1
vote
1answer
71 views

How secure is TRESOR on a virtual machine?

I'm investigating TRESOR as a way to prevent stealing of encryption keys from RAM by someone with physical access to the machine. This seems solid in the case of a dedicated server, but what about a ...
46
votes
8answers
10k views

How to prevent a hosting company from accessing a VM's encryption keys?

I want to prevent potential theft of my web application (source code + database) by my local hosting company, that I don't fully trust for some reason (but have no other choice but to use as they give,...
0
votes
0answers
43 views

Url Storage, History & Personal Data

Just Curious to Know, Where my information is being stored and how long its kept for I'm running the latest version of windows 10, my main Browser being firefox developer edition 68. I clear my ...
0
votes
0answers
134 views

Securing Clipboard Memory

Sometimes sensitive data is copied from/to processes and external devices like (long)passwords, usernames and so forth , but also often people don't get this always in mind and forget to clean that ...
3
votes
1answer
108 views

Android Application - Credentials in RAM

I have been pen testing an android mobile application for security vulnerabilities. As part of the test, I started Frida server on a mobile phone where the mobile application to be tested is installed,...
2
votes
3answers
1k views

How to delete a C# variable value permanently from memory?

I have created a variable in C#. Now I want to clear the variables value from the computer memory. Is there any way to do that? Below is my current attempt at deleting the value of recordLine, but I ...
0
votes
2answers
137 views

Docker container which reads memory belonging to another container

The field of maliciously accessing another process's memory has been broadly studied in the Linux environment. But for some reason I am not able to find similar discussion/similarities for the ...
2
votes
0answers
110 views

What are the security implications of RAMBleed?

The RAMBleed vulnerability uses Rowhammer induced bitflips to derive contents of memory that it should not have access to. This works with ECC RAM too. It is definitely scary. Is this vulnerability ...
2
votes
1answer
141 views

Is faulty RAM a security risk?

If the RAM is only slightly faulty, so that the machine boots apparently normally, but sometimes crashes. Can the fault be leveraged somehow?
3
votes
2answers
128 views

Is it safe to deploy software without memory protections such as DEP/ASLR?

Several software packages on our SOE Windows machines come with DEP and ASLR memory protections off by default. More troubling is that these applications run as SYSTEM and load their own drivers. ...
2
votes
1answer
289 views

Is zeroing out values on the stack and arguments overkill?

I generally zero out memory the moment it's served its usefulness, but only with heap-allocated chunks. Is it a sin (or overkill) to do the same with arguments and stack values? Thanks in advance. ...
2
votes
0answers
236 views

Format String Vulnerability - Can't read an address from stdin with read() in C

I wanted to exploit this code using format string vulnerability: int jackpot; void fmt_str(void) { char buf[128]; puts("Give me a string to print"); read(0, buf, 128); printf(buf); ...
2
votes
2answers
459 views

Do Anti-Virus programs scan running processes?

If I have malicious software running, and I can see it in the Task Manager, is an AV program expected to scan the processes running and test if they are a virus/malware? Or, does AV have to: Detect ...
0
votes
0answers
153 views

Volatility: Dumping memory associated with a particular process

I'm trying figure out how I can dump the memory associated with a process. So far, I've managed to identify the PID's of the processes I'm interested in (along with their offset). However, I can't ...
0
votes
0answers
76 views

How could unlink be used to overwrite an arbitrary memory location?

I am so lost when it comes to memory management exploits. Hope someone can help! So here is the question: Linux memory management uses bins (double linked lists) to manage free chunks. The unlink ...
0
votes
1answer
38 views

How files are allocated to memory in NTFS? [closed]

If a file is deleted in memory which is using NTFS and after that, I copied a new file, then where is the new file is allocated in memory? Is the file allocated in the deleted memory space or it is ...
1
vote
4answers
165 views

Volatile memory only computer?

I was wondering, is it possible to create a fully volatile computer, with no permanent memory at all (not even in the BIOS), that will be loaded on each boot from a read only live CD? Such that in ...
0
votes
0answers
114 views

Store Credit Card data in memory for using with native payment SDKs (iOS, Android)

I am implementing a Credit Card processing in mobile apps for iOS (Swift) and Android (Kotlin) using native SDK (SAQ A EP compliance level) We thought about: disabling clipboard for CC field ...
1
vote
0answers
27 views

Is it safe for a service to share memory addresses with remote clients?

Supposing a remote service has the following data structures (using C++ as an example): struct Item { std::string name; struct {} whatever_else; }; std::map <std::string, Item *> ...
0
votes
1answer
373 views

read raw dump with WinDBG

Is it possible to convert a full raw dump memory and open it in WinDBG ? In order to inspect if they are no malwares, filter process who call particular API, dump each process in memory etc...
5
votes
1answer
345 views

Are there any observed Rowhammer attacks in the wild

Due to the latest news regarding Rowhammer and its applicability to ECC DRAM, I was wondering whether there are any Rowhammer attacks spotted in the wild. Given the various approaches to conduct a ...
2
votes
1answer
173 views

Does IOMMU protect against malware insertion through PCI Network card/Sound card DMA?

I've just read about this: https://www.tripwire.com/state-of-security/security-data-protection/backdoors-hardware-attacks-rakshasa-malware/ Asides from the question in the title, I'd also like to add ...
1
vote
2answers
142 views

How can memory problems lead to code execution exploits? [closed]

In reports on security exploits/vulnerabilities on desktop applications, I often read that memory problems lead to the execution of malicious code. For example, the description of Internet Explorer ...
0
votes
0answers
47 views

If you buy a used hard drive or CPU, how to guarantee it doesn't have anything installed or running on it [duplicate]

Say you buy a used hard drive, or a computer (wondering about both cases, something that is just a drive for storage, and something that is an actual running chip). I am not interested in whether or ...
2
votes
1answer
54 views

What should I do to develop a secure note taking app in Android 8.0?

One of the factors I considered was, having all the text encrypted and stored in the device memory. But we cannot avoid having raw unencrypted data on the RAM, when the application runs. Won't ...
3
votes
2answers
355 views

Private key management in memory

I'm a developer who's working on a networking protocol that includes encryption. It doesn't really matter, but just for the sake of context I'll mention that I'm using libsodium crypto library. Now ...
1
vote
0answers
56 views

What does it mean to “run a command in memory”? [closed]

If I open a terminal and use the following commands, are they "run in memory"? $ curl -s http://website.com/file.py | python - & $ command=$(curl -s http://website.com/file.py); $(echo $command |...
2
votes
0answers
461 views

How to extract browser login credentials from memory dump? [closed]

Does anyone know if there is a way to extract passwords for social networks like from a browser memory dump? I tried this tutorial without success. I used dumpit.exe tool to make a full dump of the ...
50
votes
3answers
6k views

What is the benefit of having a cryptographically secure hash algorithm in hashmaps?

I recently read the Rust language documentation and saw this: By default, HashMap uses a cryptographically secure hashing function that can provide resistance to Denial of Service (DoS) attacks. ...
0
votes
1answer
159 views

How to securely erase JavaScript parameters after use? [duplicate]

When I pass a password as a parameter to a function, I presume it will end up on a stack or heap. When this function returns I'd expect that my password is still in memory somewhere until it is ...
4
votes
1answer
269 views

If rowhammer only results in capacitor discharge, how can it flip 0 to 1?

In rowhammer, why will changing the voltage on one row cause the other row to open/close? Is it related to induction? How can it change bits from 0 to 1? I understand from 1 to 0 - voltage discharge, ...