Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
The data, tools, and procedures which, when applied to a specific vulnerability, predictably violate the security design of a system.
4
votes
Accepted
What is the risk of a PDF "infected" with BC.Pdf.Exploit.CVE_2017_3033?
The vulnerability in question seems to be a classical out of bounds read and probably exploitable but it's hard to tell until somebody actually puts in the work to write an exploit. …
2
votes
Fuzzing: Quickly find the exact number of bytes
Maybe I am misunderstanding but usually overwriting too much is not a problem.
The common approach therefore is to overwrite more than necessary but using a specific pattern. Looking at what ends up …
1
vote
Is it a win for an attacker, if they overflow the most recently malloc'd buffer on the heap?
A win for an attacker is a bit of a vague term.
Depending on other safeguards you could possibly fill up memory and overflow the stack. Or you could initialize memory which might be used later with c …
0
votes
Accepted
How are viruses made for windows?
You don't have to exploit windows to write a virus for windows. People run all kinds of programs on windows and it's enough to exploit any one of them. …
0
votes
Transferring potentially malicious e-mail attachments to air-gapped machine
Clearly, if your service is vulnerable to receiving malicious files by e-mail this needs to be addressed anyway!
However, if you explicitly ask for such mails, you remove the legal recourse. Therefor …