Linux Security

From: dude84 (dhughes594_at_earthlink.net)
Date: 02/18/05

  • Next message: E. Charters: "Re: Linux Security" 
    Date: Fri, 18 Feb 2005 01:27:55 GMT

    Hi,

       I need assistance with learning how to write assembler code (custom)
    that will work with computer security related issues like a stack based
    buffer overflow. Can anyone point me in the direction of a newsgroup
    that could help me with this?
       I've written a piece of assembler that calls the printf function, and
    when I pass it into the buffer on my machine it does nothing and
    segmentation faults. I'm using gas with gcc. I push the string onto
    the stack call the function, add the memory space back to the stack, and
    call the function to exit the program. I need someone's help to explain
    why the hex code from this program does nothing.

  • Next message: E. Charters: "Re: Linux Security"

    Relevant Pages

    • Linux Security
      ... I need assistance with learning how to write assembler code (custom) ... that will work with computer security related issues like a stack based ... buffer overflow. ...
      (comp.os.linux.security)
    • RE: considerations about exploits tricks
      ... you can attempt to fix the stack for a start. ... This still does not stop heap attacks - ... the heap area and other data areas - not just the stack. ... any buffer overflow exploit that overflows ...
      (Security-Basics)
    • Re: Need Help Debugging
      ... you should use straight and plain ADPlus.VBS from the debugger package. ... debug info loaded, etc... ... does that avoid using the stack ?!? ... which is our custom CRITICAL_SECTION class. ...
      (microsoft.public.win32.programmer.kernel)
    • Re: Buffer overflow prevention
      ... > I have an idea on buffer overflow prevention. ... > the fact that we're using the stack, referenced by SS:ESP pair, both ... > procedure return address and for local variables. ... if we use first segment for passing variables ...
      (Bugtraq)
    • Re: Need Help Debugging
      ... does that avoid using the stack ?!? ... The first line of that function is MyEnterCriticalSection, ... which is our custom CRITICAL_SECTION class. ... If it does, it calls EnterCriticalSection ...
      (microsoft.public.win32.programmer.kernel)