CS155 Project 1

ePAPER READ

DOWNLOAD ePAPER

crypto.stanford.edu

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

START NOW

Advice

• Start early, you’ll need to read

• “Smashing the Stack” - Aleph 0ne

• “Basic Integer Overflows”

• “Exploiting Format String Vulnerabilities”

• “How to hijack the Global Offset Table...”

• “Once upon a free”

• Reference IA-32 guide (on syllabus with papers)

• Part 2 MUCH harder than Part 1.

• Make a diagram of the stack using gdb

Proposal Protocol for DME and Airplane Communication

Auditing SQL Queries - Stanford Crypto Group - Stanford University

slides - Applied Crypto Group at Stanford University

Computing Arbitrary Functions of Encrypted Data - Stanford Crypto ...

Programming Project #2 - Applied Crypto Group at Stanford University

Assignment #3 - Applied Crypto Group at Stanford University

Encryption Schemes from Bilinear Maps - Eu-Jin Goh

Assignment #2 - Applied Crypto Group at Stanford University

Basic web security model - Stanford Crypto Group

CS 161: Design and Analysis of Algorithms - Stanford Crypto Group

Advice • Start early, you’ll need to read • “Smashing the Stack” - Aleph 0ne • “Basic Integer Overflows” • “Exploiting Format String Vulnerabilities” • “How to hijack the Global Offset Table...” • “Once upon a free” • Reference IA-32 guide (on syllabus with papers) • Part 2 MUCH harder than Part 1. • Make a diagram of the stack using gdb

Format Strings • See Lecture 3 slides pp. 32-37 • Essentially two issues: • Can arbitrarily read out stuff on stack because printf() doesn’t check arguments actually supplied. • Can write to memory using %n

Page 1 and 2: CS155 Project 1 Gary Luu Spring 200
Page 3 and 4: int bar(char *arg, char *out) { str
Page 5 and 6: sploit1 • Want to overwrite retur
Page 7 and 8: Crafting the Exploit String • Pla
Page 9 and 10: IA-32 Review • x86 is little endi
Page 11: Interaction Between $esp, $ebp, $ei

CS155 Project 1

Create successful ePaper yourself

Delete template?

Save as template?