3 ms·

Hacking Blind (2014) [pdf]

• peter_d_sherman 3y ago
  >"The attack works against modern 64-bit Linux with address space layout randomization (ASLR), no-execute page protection (NX) and stack canaries." Related: "Blind Return Oriented Programming (BROP)": https://www.scs.stanford.edu/brop/ https://www.scs.stanford.edu/brop/ >"Attack outline o Break ASLR by "stack reading" a return address (and canaries). [...]" >"The fundamental problem sometimes seen in servers is that they fork a new worker process after a crash, without any rerandomization" Disclaimer: I am not posting a link to this paper to enable any illegal activity -- as someone interested in securing OS's, servers and software, I find it deeply troubling that ASLR (which I previously thought was an ingenious and fairly foolproof security method) could potentially be hacked, but this paper seems to indicate that this is indeed possible...