Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 128755

The data, tools, and procedures which, when applied to a specific vulnerability, predictably violate the security design of a system.

1 vote

Is it a win for an attacker, if they overflow the most recently malloc'd buffer on the heap?

A win for an attacker is a bit of a vague term. Depending on other safeguards you could possibly fill up memory and overflow the stack. Or you could initialize memory which might be used later with c …
Elias's user avatar
  • 1,990
0 votes

Transferring potentially malicious e-mail attachments to air-gapped machine

Clearly, if your service is vulnerable to receiving malicious files by e-mail this needs to be addressed anyway! However, if you explicitly ask for such mails, you remove the legal recourse. Therefor …
Elias's user avatar
  • 1,990
4 votes
Accepted

What is the risk of a PDF "infected" with BC.Pdf.Exploit.CVE_2017_3033?

The vulnerability in question seems to be a classical out of bounds read and probably exploitable but it's hard to tell until somebody actually puts in the work to write an exploit. …
Elias's user avatar
  • 1,990
0 votes
Accepted

How are viruses made for windows?

You don't have to exploit windows to write a virus for windows. People run all kinds of programs on windows and it's enough to exploit any one of them. …
Elias's user avatar
  • 1,990
2 votes

Fuzzing: Quickly find the exact number of bytes

Maybe I am misunderstanding but usually overwriting too much is not a problem. The common approach therefore is to overwrite more than necessary but using a specific pattern. Looking at what ends up …
Elias's user avatar
  • 1,990