Heap overflow

Abd Alrahman saleh

 ex-heap-1.c Questions

$(3 + rest of time)

1 min 3 mins 3 mins mins

Brief talk ex-heap-2.c

 Brief talk about the heap : Heap
HEAP STACK

- What is heap?
- What is chunk?
- What is block?
- How is the heap managed?
- What is it different from the stack?
Brief talk about the heap : Chunk
HEAP
 Brief talk about the heap : Heap vs stack

Heap Stack

- Low - Critical
- int *buffer = (int *) malloc(20); - int buffer [32];
- Programmer - OS
- Programmer - Automatically
Example 1,2 : in VS Code
 Resources

[1]https://askubuntu.com/questions/32441/does-ubuntu-use-security-features-like-dep-and-alsr

[2] https://gist.github.com/joswr1ght/a45d000ceaccf4cce6cb

[3]https://support.microsoft.com/en-us/topic/emet-mitigations-guidelines-b529d543-2a81-7b5a-d529- 84b30e1ecee0

[4]https://www.youtube.com/channel/UCJfVYTHdaZKILBCesyBb37w/playlists

[5]http://www.jsums.edu/nmeghanathan/files/2015/05/CSC437-Fall2013-Module-5-Buffer-OverflowAttacks.pdf?x61976

[6]https://www.usna.edu/ECE/ec312/Lessons/host/EC312_Lesson_8_Buffer_Overflow_Attack_Course_ Notes.pdf

[7] https://exploit.education/phoenix/ [8] https://www.networkworld.com/article/3331199/what-does-aslr-do-for-linux.html

Q/A