5 ms·
Memory analysis and exploitation is fascinating. Anyone knows any good resource for someone interested in it but still quite "noobish"? I know only Drepper's pa
by mziulu 17y ago
Memory analysis and exploitation is fascinating. Anyone knows any good resource for someone interested in it but still quite "noobish"? I know only Drepper's paper and the classic "Smashing the stack [...]"...
- rw 17y agoMatasano's "Chargen" blog has a few posts on the Flash vulnerability Mark Dowd found last spring. They make it understandable. Their site is currently down, but Google has a cache: http://74.125.47.132/search?q=cache:5VHY2EwpC-8J:www.matasano.com/log/1038/dowds-flash-report-what-have-we-learned http://74.125.47.132/search?q=cache:5VHY2EwpC-8J:www.matasan...
- leif 17y agoSome papers from a security class at my school, varying levels of difficulty, but they all start from pretty low assumed knowledge if you're careful: http://www.cs.sunysb.edu/~rob/teaching/cse509-sp09/beyondsmashing.pdf http://www.cs.sunysb.edu/~rob/teaching/cse509-sp09/beyondsma... http://www.cs.sunysb.edu/~rob/teaching/cse509-sp09/formatstring-1.2.pdf http://www.cs.sunysb.edu/~rob/teaching/cse509-sp09/formatstr... http://www.cs.sunysb.edu/~rob/teaching/cse509-sp09/asrandom.pdf http://www.cs.sunysb.edu/~rob/teaching/cse509-sp09/asrandom....