Skip to main content

All Questions

1vote
2answers
331views

What is the heapspray technique and how to use it as reliably as possible?

Can somebody explain the different steps to produce a heapspray attack (what are the needed vulnerabilities in the targeted software, what are the limitations of such technique, how to proceed, ...) ...
perror's user avatar
1vote
1answer
1kviews

Determining the target address in a heap overflow

For a heap overflow to occur and arbitrary code to be executed, the function free() performs the step : hdr->next->next->prev = hdr->next->prev I understand that the address of hdr-&...
sudhacker's user avatar

close