4 ms·

Learned something new today. http://en.wikipedia.org/wiki/Address_space_layout_randomization http://en.wikipedia.org/wiki/Address_space_layout_randomizat...

by Tomis02 14y ago

Simucal 14y ago
A few years ago I was playing around with some examples from the infamous 1996 article, "Smashing the Stack for Fun and Profit". I was somewhat dismayed to find all these new fangled protections like ASLR and Stack Protection that made executing simple buffer overflows much more difficult! I realize that these are good things but as a student of security it did raise the bar of difficulty for writing real-world exploits. You need to compile your programs with the necessary flags to turn off these protections or if that isn't an option you need to try and use various counter measures like NOP slides, heap sprays, stack cookie replacement etc. I wish I had been around to enjoy what seems like must have been the golden era of the 90's when writing buffer overflows was relatively easy.
- emillon 14y ago
  > I wish I had been around to enjoy what seems like must have been the golden era of the 90's when writing buffer overflows was relatively easy. There are a lot of more primitive computing devices which don't have such protections. For example, ASLR was added to android as late as version 4.0 (2011).
darkarmani 14y ago
Here is Mark Dowd's amazing BlackHat talk from 2008, that demolished MS' new ASLR protections. I've linked the google quick view, so you don't have to trust the PDF link: https://docs.google.com/a/continuum.io/viewer?a=v&q=cache:7dsLF97Pg0AJ:www.phreedom.org/presentations/how-to-impress-girls/how-to-impress-girls.pdf+&hl=en&gl=us&pid=bl&srcid=ADGEESidlTAvFpFW8-pTynsL-CPLpqXKD4fDYI18Uoy6bjkRu4a9D2VOVNYq-VqYJ5iFrUvOs77WXgFjNGA9pOOwgsS8D0T9mpZZyaIkq3aTq93iZRsnM3c3VpEbFIOlmYQNmTfuJK2b&sig=AHIEtbQiu8UiZUm-5rbq-5tgmSNQWIElgQ https://docs.google.com/a/continuum.io/viewer?a=v&q=cach...

Learned something new today. http://en.wikipedia.org/wiki/Address_space_layout_randomization http://en.wikipedia.org/wiki/Address_space_layout_randomizat...

by Tomis02 14y ago

Learned something new today. http://en.wikipedia.org/wiki/Address_space_layout_randomization http://en.wikipedia.org/wiki/Address_space_layout_randomizat...

Simucal 14y ago

A few years ago I was playing around with some examples from the infamous 1996 article, "Smashing the Stack for Fun and Profit". I was somewhat dismayed to find all these new fangled protections like ASLR and Stack Protection that made executing simple buffer overflows much more difficult! I realize that these are good things but as a student of security it did raise the bar of difficulty for writing real-world exploits. You need to compile your programs with the necessary flags to turn off these protections or if that isn't an option you need to try and use various counter measures like NOP slides, heap sprays, stack cookie replacement etc. I wish I had been around to enjoy what seems like must have been the golden era of the 90's when writing buffer overflows was relatively easy.

emillon 14y ago
> I wish I had been around to enjoy what seems like must have been the golden era of the 90's when writing buffer overflows was relatively easy. There are a lot of more primitive computing devices which don't have such protections. For example, ASLR was added to android as late as version 4.0 (2011).

darkarmani 14y ago

Here is Mark Dowd's amazing BlackHat talk from 2008, that demolished MS' new ASLR protections. I've linked the google quick view, so you don't have to trust the PDF link: https://docs.google.com/a/continuum.io/viewer?a=v&q=cache:7dsLF97Pg0AJ:www.phreedom.org/presentations/how-to-impress-girls/how-to-impress-girls.pdf+&hl=en&gl=us&pid=bl&srcid=ADGEESidlTAvFpFW8-pTynsL-CPLpqXKD4fDYI18Uoy6bjkRu4a9D2VOVNYq-VqYJ5iFrUvOs77WXgFjNGA9pOOwgsS8D0T9mpZZyaIkq3aTq93iZRsnM3c3VpEbFIOlmYQNmTfuJK2b&sig=AHIEtbQiu8UiZUm-5rbq-5tgmSNQWIElgQ https://docs.google.com/a/continuum.io/viewer?a=v&q=cach...