@Tinned_Tuna With no more strong force the nucleus of every atom in existence would fly apart. Everything would pretty much just evaporate into a cloud.
and without an electromagnetic force, I don't think photons could exist. Further, there'd be nothing keeping electrons "attached" to nuclei, and nothing keeping nuclei from getting arbitrarily close to one-another. Engage fusion all over the shop, but no release of photons?
@DavidFreitag In fact, without electromagnetic forces, nothing would prevent gravitation from compressing the Earth into a ball of neutrons of about 120m in diameter (but Pauli's exclusion principle would then block it there -- no black hole).
Actually a huge number of electrons would probably escape so the final ball would also keep a substantial number of protons.
C++ guys, I'd like to demonstrate buffer overflows to a group of people. Where can I find an example of short C++ code that has an exploitable buffer overflow vulnerability. (assuming no special security features activated on the system, and it can exploited to get a shell)
I am trying to exploit simple stack overflow vulnerability. I have a basic code in c:
#include <cstring>
int main( int argc, char** argv )
{
char buffer[500];
strcpy(buffer, argv[1]);
return 0;
}
compiled using -fno-stack-protector. I've already figured out the buffer l...
@Adnan Disable all memory-safety exploit mitigations on a box, call a function that copies input into a fixed size buffer, profit. See also, insecure.org/stf/smashstack.html
@raz That's probable. Even in 32-bit mode, the Linux kernel can use the "NX" bit to mark pages as non-executable. This is activated when the PAE format of MMU tables is used.
@Tinned_Tuna The goal of my demo is to start them with something very basic. That's why I won't have any security features enabled (exploit mitigation stuff)
I was trying to think of another reason why nop's wouldn't execute. Outside of stack cookies, I couldn't think of anything
@Adnan Sounds like a good start. Metasploit allows for easy shellcode generation. You can tell it to ignore certain characters (i.e. 0x00, 0x0a, 0x0d). Then the students can copy and paste the given shellcode into a C array. Fairly straight forward to use.
@raz Yup. Now I'm trying to find a good shellcode that will pop a shell for me on the same machine (exploiting a local process running as root that only accepts local connections, you know priv. esc.)
I think the best way would be to execute some code that would add a user to sudoers, or reset the root password
I recently went walking in the highlands in Snowdonia, Wales and we came across this:
Can anyone explain what it is? My guess was some kind of fungus but I'm not positive. The ground was very water logged and boggy.
It looked a lot like frog spawn, but it's autumn here and we wouldn't see fro...
@Simon Yeah if you're just doing it for fun. If you want some real dirty learning you could write a kernel module :D Bind to an interface, just write raw data out any which way you wanted.
@Xander To clarify your comments here; Chrome doesn't just ask for the password for security measures. It asks Windows to prompt for it so that Windows can decrypt the passphrase, and return it to Chrome for form use.
@raz I think that confuses, rather than clarifies the issue.
@raz You do not need to enter your Windows password for Chrome to be able to auto-fill a password field in a form. Your comment makes it sound like you do.
Question:
"Certain properties of a programming language may require that the only way to get the code written in it be executed is by interpretation. In other words, compilation to a native machine code of a traditional CPU is not possible. What are these properties?"
Compilers: Principles and ...
I just remember in my engineering class. They decided to teach MatLab first, and then C. And some people had a difficult time with the transition. Both with syntax changes, and the concepts. But then again MatLab introduces its own weirdness with matrices and all.
@Simon It's a great language for learning algorithm implementation. If you're trying to understand the efficiency of different types of lists, trees, tree traversal, etc Java is fantastic.
@RоryMcCune I'd rather hear a good old song a million times than a crap new one once tho. And this is where, on average, old trumps new by a few orders of magnitude. So The Beatles are still just fine, keep them coming and flag whatever @Simon posts as spam/offensive :)
Oh that one with Jello Biafra must have been in late 90's .. great gig close by in Austria. A few years before they were even in my city but on their own. Also had fantastic time. And lots of popping of course. Crazy times. Oy! :)
I am trying to exploit simple stack overflow vulnerability. I have a basic code in c:
#include <cstring>
int main( int argc, char** argv )
{
char buffer[500];
strcpy(buffer, argv[1]);
return 0;
}
compiled using -fno-stack-protector. I've already figured out the buffer l...
I recently went walking in the highlands in Snowdonia, Wales and we came across this:
Can anyone explain what it is? My guess was some kind of fungus but I'm not positive. The ground was very water logged and boggy.
It looked a lot like frog spawn, but it's autumn here and we wouldn't see fro...
