0x07 Memory Corruption1

Beschreibung:

Diese Episode handelt von Memory-Corruption Schwachstellen. Die
letzte Whatsapp-Schwachstelle zeigte wieder eindrucksvoll dass
Memory-Corruption Schwachstellen lange nicht der Vergangenheit
angehören. In dieser Folge möchten wir über stack-based Buffer
Overflows sprechen.
Shownotes:

Segfault.fm Episode 0x06 Android Hardening

CVE-2019-3568

arstechnica: WhatsApp vulnerability exploited to infect
phones with Israeli spyware

osxdaily:Serious FaceTime Bug Allows Eavesdropping of
Microphone on iPhone & Mac

NSO Group

CitizenLab

Memory Corruption Attacks: The almost complete history

WP: Morris Worm

Aleph One: Smashing the stack for fun and profit

WP: Virtual Memory

WP: Cold Boot Attack

WP: ELF Format

WP: PE Format

WP: DOS MZ Executable

WP: Stack (Data Type)

WP: Call Stack

WP: X86 Register

WP: Return Address

WP: Memory Hierarchy

Gute Visualisierung von Codebashing

CERN: Common vulnerabilities guide for C programmers

Protostar (Archive)

Root Me

Smash The Stack Wargammes Network

WP: Shellcode

Shellcode Datenbank

Metasploit

WP: NOP slide, NOP sled oder NOP ramp

WP: Von Neumann Architecture

WP: Executable space protection

History: Non-Executable Stack

WP: Return-to-libc attack

WP: C Standard Library

WP: Dynamic Linker

Paper: Return-Oriented Programming without Returns (2010a)

WP: Stack_canaries

WP: Format String Attack

WP: Address Space Layout Randomization

WP: Position-independent_code (PIE)

Go Programming Language

Rust Lang

WP: Control-flow Integrity

Microsoft: SafeStr

CERT Secure C Conding Standard

WP: Fuzzing

American Fuzzy Loop (AFL)