User dev

12 votes

2 answers

14k views

Heap Buffer Overflow - AddressSanitizer output - what is needed to exploit this condition?

asked Feb 26, 2016 at 11:45

7 votes

1 answer

3k views

ROP Programming/Exploitation on ARM - Gadget chain

asked Sep 28, 2015 at 19:26

7 votes

1 answer

702 views

Blueborne - Attack Scenario Clarification

asked Sep 19, 2017 at 7:56

4 votes

1 answer

723 views

Android Stagefright Google Zero Day Exploit doesn't run. How to fix? [closed]

asked Sep 18, 2015 at 9:21

4 votes

2 answers

1k views

InfoSec certifications for global startup

asked Feb 24, 2020 at 8:18

3 votes

1 answer

6k views

Amazon AWS KMS - Concept of signing in general and with JWT

asked Jun 27, 2018 at 6:58

3 votes

1 answer

372 views

Meltdown - PoC - Reading physical address with KASLR disabled does not work

asked Jan 11, 2018 at 13:46

3 votes

1 answer

768 views

Spectre Proof of Concept (PoC) Speculative Execution - Checking for value

asked Jan 16, 2018 at 15:37

3 votes

1 answer

2k views

ROP chain on x64, get rid of nulls

asked Mar 10, 2016 at 17:14

3 votes

1 answer

3k views

Heap Overflow - unlink() technique exploitation on x86_64 (64 bit)

asked Feb 19, 2017 at 17:39

3 votes

1 answer

123 views

Protection of API from abuse (signup and carding attacks)

asked Jun 1 at 10:36

2 votes

2 answers

210 views

What is the impact and threat of Spectre in Javascript?

asked Mar 16, 2021 at 9:08

2 votes

0 answers

330 views

Disabling Android mediaserver (/system/bin/mediaserver) ASLR

asked Mar 23, 2017 at 16:45

2 votes

0 answers

576 views

Vtable - finding the vtable pointer

asked Mar 29, 2017 at 13:10

2 votes

1 answer

2k views

Stagefright - building ROP stack - pivoting

asked Apr 1, 2017 at 20:11

2 votes

3 answers

2k views

How can I execute shell in this CTF exercise?

asked May 25, 2016 at 12:58

2 votes

1 answer

842 views

Is it possible to execute code in this program using heap overflow?

asked Feb 17, 2017 at 19:22

2 votes

2 answers

1k views

CVE-2015-3864 - Android Stagefright - how Integer Overflow happens here?

asked Sep 19, 2015 at 17:18

2 votes

1 answer

2k views

KPTI - Meltdown - PoC Analysis

asked Jan 3, 2018 at 20:00

2 votes

0 answers

205 views

Meltdown - Reading processes info from leaked memory [closed]

asked Jan 22, 2018 at 18:48

1 vote

0 answers

346 views

GDPR compliance in Amazon AWS

asked Apr 28, 2018 at 15:58

1 vote

1 answer

474 views

Meltdown - Reading Process Memory Data

asked Jan 9, 2018 at 9:33

1 vote

0 answers

84 views

Security Team and Security in a small-medium organization/startup [closed]

asked Jul 29, 2020 at 11:47

1 vote

1 answer

162 views

How to implement zero trust concept on a pod running in Kubernetes?

asked Aug 19, 2020 at 16:40

1 vote

0 answers

256 views

Exploit - Code execution without assembly call instruction, int etc on ia_64

asked Oct 14, 2020 at 12:41

1 vote

1 answer

1k views

Exploit Stack Based buffer overflow (x64) while controlling rbx register

asked Mar 1, 2016 at 18:56

1 vote

1 answer

365 views

CVE-2016-6254 - Understanding Heap Overflow

asked Feb 10, 2017 at 13:55

1 vote

1 answer

786 views

Kernel x86 32 bit Stack Overflow - overwriting EIP segfaults in __kernel_vsyscall+9 [closed]

asked Oct 9, 2017 at 13:23

1 vote

0 answers

317 views

Kernel 4.3.5 Exploitation x86 32 bit - Stack Structure [closed]

asked Oct 11, 2017 at 9:54

1 vote

0 answers

176 views

Dom based Cross-Site Scripting (XSS) sources

asked May 4, 2020 at 8:43

Stack Exchange Network

40 Questions

Heap Buffer Overflow - AddressSanitizer output - what is needed to exploit this condition?

ROP Programming/Exploitation on ARM - Gadget chain

Blueborne - Attack Scenario Clarification

Android Stagefright Google Zero Day Exploit doesn't run. How to fix? [closed]

InfoSec certifications for global startup

Amazon AWS KMS - Concept of signing in general and with JWT

Meltdown - PoC - Reading physical address with KASLR disabled does not work

Spectre Proof of Concept (PoC) Speculative Execution - Checking for value

ROP chain on x64, get rid of nulls

Heap Overflow - unlink() technique exploitation on x86_64 (64 bit)

Protection of API from abuse (signup and carding attacks)

What is the impact and threat of Spectre in Javascript?

Disabling Android mediaserver (/system/bin/mediaserver) ASLR

Vtable - finding the vtable pointer

Stagefright - building ROP stack - pivoting

How can I execute shell in this CTF exercise?

Is it possible to execute code in this program using heap overflow?

CVE-2015-3864 - Android Stagefright - how Integer Overflow happens here?

KPTI - Meltdown - PoC Analysis

Meltdown - Reading processes info from leaked memory [closed]

GDPR compliance in Amazon AWS

Meltdown - Reading Process Memory Data

Security Team and Security in a small-medium organization/startup [closed]

How to implement zero trust concept on a pod running in Kubernetes?

Exploit - Code execution without assembly call instruction, int etc on ia_64

Exploit Stack Based buffer overflow (x64) while controlling rbx register

CVE-2016-6254 - Understanding Heap Overflow

Kernel x86 32 bit Stack Overflow - overwriting EIP segfaults in __kernel_vsyscall+9 [closed]

Kernel 4.3.5 Exploitation x86 32 bit - Stack Structure [closed]

Dom based Cross-Site Scripting (XSS) sources