exploit_开发者

Need to exploit buffer overflow. Can't figure out how to uncorrupt the stack after executing exploit code?

Basic开发者_Python百科ally the function I am exploiting is this: int getbufn() { char buf[512]; Gets(buf);[详细]

2023-04-12 09:31 分类：问答

Session fixation attack replication, term paper (php)

I\'m trying to replicate session for my term paper and I\'ve found quite a bit tips here, but can\'t replicate an attack on my localhost.[详细]

2023-03-27 11:42 分类：问答

Can parameterized statement stop all SQL injection?

If yes, why are there still so many successful SQL injections? Just because some developers are too dumb to use parameteri开发者_JAVA百科zed statements?When articles talk about parameterized queries s[详细]

2023-03-21 23:41 分类：问答

Jump to register with return to libc

This is the vulnerable script: #include <stdio.h> #include <string.h> #include <stdlib.h>[详细]

2023-03-17 02:31 分类：问答

Perl's Pack('V') function in Python?

I\'ve been working on some exploit development recently to get ready for a training course, and I\'ve run into a problem with a tutorial. I\'ve been following along with all the tutorials I can find,[详细]

2023-03-13 14:22 分类：问答

PHP code injection. Do we have a security risk?

We have a simple php file that captures emails. It drops these emails into a csv file (which is not executable by php). We recently had someone who managed to hack our site and this seemed like one of[详细]

2023-03-12 14:58 分类：问答

Perl CGI hacked? But I'm doing everything right

I just noticed some strange PHP files in one of my web directories.They turned out to be spammer-placed exploit files.[详细]

2023-03-04 08:44 分类：问答

Buffer Overflow - why some ascii's work and not others

I\'m sorry if this question is stupid or has been asked, but I couldn\'t find it. I have a program that I was attempting to use a buffer over flow.It is a simple program that uses getchar() to retrie[详细]

2023-03-03 06:42 分类：问答

Shellcode as payload for buffer overflow (or other) exploits executed as root?

When I use shellcode such as the ones provided here* as payload to some vu开发者_StackOverflow社区lnerable program, how is the shell executed as root? I am asking about how the privileges are elevated[详细]

2023-02-26 06:50 分类：问答

What is this programe doing?

#define bufsize 260 /* setuid(0) shellcode by by Matias Sedalo 3x ^_^ */ char shellcode[] =\"\\x31\\xdb\\x53\\x8d\\x43\\x17\\xcd\\x80\\x99\\x68\\x6e\\x2f\\x73\\x68\\x68\"[详细]

2023-02-25 12:13 分类：问答