All Questions
Tagged with heap-overflowattacks
2 questions
1vote
2answers
331views
What is the heapspray technique and how to use it as reliably as possible?
Can somebody explain the different steps to produce a heapspray attack (what are the needed vulnerabilities in the targeted software, what are the limitations of such technique, how to proceed, ...) ...
1vote
1answer
1kviews
Determining the target address in a heap overflow
For a heap overflow to occur and arbitrary code to be executed, the function free() performs the step : hdr->next->next->prev = hdr->next->prev I understand that the address of hdr-&...