I'm fairly familiar with the popular tools such as afl and Codenomicon Defensics. But I find the academic literature very opaque and don't really know where to start.If I want to understand the cutting edge of fuzzing techniques, and what will be the emerging state of the art in the next few years - where should I look? Any good papers or books (with at least some for novices to understand), or...
I agree with your comment but, what's with the capitalization of these words?
I suppose if you have VCs bankrolling you, you can do whatever you want.
Most rootings/jailbreaks that have been widely released use software vulnerabilities to escalate privilege.If instead you had access to the hardware of a device, and could make any reasonable modification or intervention, how would you approach this? What techniques are used for this class of attacks?(Reasonable modifications might be things like soldering extra components, removing ICs, using...
I'm sorry for posting low quality comments and won't do it again.
I understand how this vulnerability can be used to corrupt the heap, as it's writing more data than malloc was asked to reserve, so it can overwrite memory allocations from other parts of the program.
I am curious as to how would one create a reliable remote code execution exploit out of this? I guess that one may be able to find a function pointer somewhere to overwrite, and use that to control program flow to your shellcode - but as this is dynamically allocated memory, could it not be adjacent to pretty much anything?
How would an attacker approach making a remote code execution exploit, given these constraints? Is it possible in practice or more theoretical?
(I'm not challenging this classification, just would really like to know how this works!)
For topics like: common vulnerabilities and mitigations, secure programming techniques, static analysis, reverse engineering, fuzzing, cryptography, and so on.Looking for some good tomes to expand my mind and bookshelf.