Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with shellcode
Search options answers only
not deleted
user 975
In computer security, a shellcode is a small piece of code used as the payload in the exploitation of a software vulnerability. It is called "shellcode" because it typically starts a command shell from which the attacker can control the compromised machine, but any piece of code that performs a similar task can be called shellcode.
10
votes
Accepted
Do I always have to overwrite EIP to get to write on the stack in a buffer overflow?
You don't always have to overwrite the return address in order to exploit a stack based buffer overflow (also has a great diagram of the stack layout). With a stack based buffer overflow you can corr …
- 47.3k
3
votes
Accepted
Stack canaries protection and ROP
A stack canary is still a problem, because you cannot control the EIP in a stack based buffer overflow without overwriting the return address (which is above the carny). Further more the function that …
- 47.3k
3
votes
Accepted
How to deal with MySQL's Errcode 13 when trying to write a shell
This error is happening because MySQL does not have write privileges to this directory: /var/www/html/dvwa/.
Most modern Linux distributions use AppArmor or SELinux to isolate daemon processes. It i …
- 47.3k
2
votes
Why should I use ROP for exploit dev?
When an attacker is forced into this position, they use a series of ROP gadgets to establish an environment that can reliably execute shellcode. …
- 47.3k
6
votes
Cannot get simple shellcode runner to work
In the proposed example, the program is executing a nop sled consisting of \x90. After this nop sled executes, it does not return to main, and therefore crashes with a Segmentation fault.
Conside …
- 47.3k
15
votes
Accepted
How "leaking pointers" to bypass DEP/ASLR works
The idea behind DEP is that you are making regions of memory non-executable, such that shellcode in this area cannot be executed. … If you can populate a region within this page with your shellcode then it may be possible to accurately execute your shellcode by using the leaked memory address as a base and then hopefully your shellcode …
- 47.3k