Smashing the Stack in the 21st Century :: Jon Gjengset
Aleph One’s excellent Smashing the Stack for Fun and Profit article from 1996 has long been the go-to for anyone looking to learn how buffer overflow attacks work. But the world has changed a lot since then, and the original attacks will not generally work on modern 64-bit machines. Some of this is due to many new defense mechanisms that are now enabled by default (see Paul Makowski’s Smashing the Stack in 2011 for an overview), but those can be disabled if all you want to do is understand how these attacks work. What cannot easily be avoided any more though is 64-bit execution environments.
Aleph One’s excellent Smashing the Stack for Fun and Profit article from 1996 has long been the go-to for anyone looking to learn how buffer overflow attacks work. But the world has changed a lot since then, and the original attacks will not generally work on modern 64-bit machines. Some of this is due to many new defense mechanisms that are now enabled by default (see Paul Makowski’s Smashing the Stack in 2011 for an overview), but those can be disabled if all you want to do is understand how these attacks work. What cannot easily be avoided any more though is 64-bit execution environments. T
Explore this link on the map →related reading
- Memory Safety Vulnerabilities | Computer Securitytextbook.cs161.org
- Mitigating Memory-Safety Vulnerabilities | Computer Securitytextbook.cs161.org
- Assessing Claude Mythos Preview’s cybersecurity capabilities \ Anthropicred.anthropic.com
- CS107 Lab 6: Runtime Stackweb.stanford.edu
- CS107E Assignment 4: Stack and Heapcs107e.github.io
- x86 Assembly and Call Stack | Computer Securitytextbook.cs161.org
- how I think when I think about programming - alice mazalicemaz.com
- Zenbleedlock.cmpxchg8b.com
- CS107 Guide to x86-64web.stanford.edu
- CS107 Guide to x86-64web.stanford.edu
- Introduction to reverse engineering and Assembly. | KaKaRoTo's Blogkakaroto.homelinux.net
- Reading privileged memory with a side-channel - Project Zerogoogleprojectzero.blogspot.com