Programmer Think

Buffer Overflow Attack Lab (Set-UID Version) Lab link: https://seedsecuritylabs.org/Labs_20.04/Software/Buffer_Overflow_Setuid/ Experimental environment: ubuntu20 04 The aim of the attack is to obtain the uid permission of the attack buffer file by using the attack buffer permission of the over set Experimental documents: Labsetup.zip Expe ...

SHA1 algorithm details SHA1 algorithm, as a digest algorithm, is used in various signature, digest and other scenarios. In this chapter, we analyze the details of SHA1 algorithm in detail; Definition of terms word: 32bit String, which can be expressed as 8 hexadecimal sequences, such as A103FE23; integer: number between 0-2 ^ 32-1; B ...

Environment construction Project address https://github.com/DarthTon/Blackbone Project introduction As Windows developers, they often encounter operations of enumerating processes, enumerating modules, reading and writing process memory; Windows security developers will involve injection, hook, operating PE files and writing drivers. We ...

preface Explain the types of vulnerabilities on various WEB levels, the hazard level of specific vulnerabilities, and a brief impact range test for example analysis. The vulnerabilities in the mind map are also various knowledge points we will learn. In fact, according to the formation principle of vulnerabilities, how to find and use them ...

DDoS attack methods Most of the content of this paper draws lessons from the in-depth analysis of DDoS attack and prevention of the king of destruction. Interested students can read this book, which is very helpful to me as an introductory book. DDoS (Distributed Denial of Service), the first denial of service attack, dates back to 1996. Why ...

HTTP&HTTPS HTTP: HTTP->TCPHTTPS: http - > SSL / TLS (encryption / decryption) - > TCP 1.HTTP HyperText Transfer Protocol is an application layer protocol for distributed, cooperative and hypermedia information systems. Simply put, it is a method of publishing and receiving HTML pages, which is used to transfer information betwee ...

dataleak Two \ x00 can be skipped with "\ or / but each time" \ is used, 4 bytes will be copied to buf, so the last 3 bytes of data cannot be leaked. Therefore, / \ is used to control the leaked string with garbage data filling. exp: #!python #coding:utf-8 from pwn import * import subprocess, sys, os from time import sleep sa = l ...

Type of encryption: In daily design and development, in order to ensure the security of data transmission and data storage, data plaintext can be encrypted into complex ciphertext through specific algorithms. At present, the mainstream encryption methods can be roughly divided into one-way encryption and two-way encryption. Unidirection ...

File contains vulnerability Vulnerability description When the server contains arbitrary files through PHP features (functions), because the source of the file to be included is not filtered strictly, it can contain a malicious file, and we can use the included file to construct malicious code for attack. Causes of vulnerabilities ...

In the previous article, we introduced inline hook (hook method for modifying code). Next, we are going to introduce hardware breakpoint + veh hook (hook method without modifying code). As the groundwork, this paper first introduces the hardware breakpoint.   After obtaining the actual combat code and reference materials of this article, please ...