Video wird geladen...

Video konnte nicht geladen werden

Beim Laden dieses Videos ist ein Problem aufgetreten. Dies könnte an einem vorübergehenden Netzwerkproblem liegen oder das Video ist möglicherweise nicht verfügbar.

How a buffer overflow overwrites the return address, in C and x86-64.

tetsuo

237,694 subscribers

25,725 Aufrufe • vor 2 Tagen •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

10 Kommentare

Profilbild von GD

GDvor 2 Tagen

Agenc!

Profilbild von why

whyvor 2 Tagen

Seeing the exact offset from the buffer to saved RIP is usually the most useful part of these examples. It turns abstract memory corruption into something measurable.

Profilbild von Tree Lake Rain 🌲🦆🌦️

Tree Lake Rain 🌲🦆🌦️vor 2 Tagen

c

Profilbild von not Arnold (Parody) 🔥💪

not Arnold (Parody) 🔥💪vor 2 Tagen

How are you brotha?

Profilbild von Merdog

Merdogvor 2 Tagen

😉😉

Profilbild von kotora673

kotora673vor 2 Tagen

C言語も、x86系とRISC系で書き方代えなきゃいけないのが邪魔くさい。

Profilbild von HexHolder

HexHoldervor 2 Tagen

A nice explanation of a buffer overflow

Profilbild von Rory

Roryvor 2 Tagen

cool stuff, Tetsuo

Profilbild von Andreas Zottsen

Andreas Zottsenvor 2 Tagen

Thanks for the video! So the while loop, where the exit from the loop depends on user input, is the very "stinky" spot in the C language that leads to big problems. If you avoid it, there won’t be any problems, right?

Profilbild von NG+

NG+vor 2 Tagen

@tetsuoai salut Est ce qu’un article existe pour ce sujet ?ça m’intéresse beaucoup

Ähnliche Videos

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

ACE Responder

21,289 Aufrufe • vor 1 Jahr

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

ACE Responder

37,433 Aufrufe • vor 3 Jahren

More buffer overflow practice using Claude Code and Binary Ninja to assist.

More buffer overflow practice using Claude Code and Binary Ninja to assist.

Matt Brown

30,555 Aufrufe • vor 8 Monaten

x86 segmentation maps memory references through segment registers. It is still used in modern x86-64 for FS/GS, especially thread-local storage and kernel per-CPU data. In sandboxing, segmentation can restrict untrusted code to a fixed memory region. MIT 6.858.

x86 segmentation maps memory references through segment registers. It is still used in modern x86-64 for FS/GS, especially thread-local storage and kernel per-CPU data. In sandboxing, segmentation can restrict untrusted code to a fixed memory region. MIT 6.858.

tetsuo

17,558 Aufrufe • vor 3 Monaten

i built an entire x86 CPU emulator in CSS (no javascript) you can write programs in C, compile them to x86 machine code with GCC, and run them inside CSS

i built an entire x86 CPU emulator in CSS (no javascript) you can write programs in C, compile them to x86 machine code with GCC, and run them inside CSS

Rebane

1,076,556 Aufrufe • vor 6 Monaten

AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow) we will release PoC post disclosure and patch

AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow) we will release PoC post disclosure and patch

V12

131,652 Aufrufe • vor 2 Monaten

To build a generic swap in C, pass the size explicitly, create a temporary byte buffer, then use memcpy three times to rotate the bit patterns. VLA char buffer[size] is a GCC thing, for a more portable version malloc the temp and free it. Stanford CS107, lecture 4

To build a generic swap in C, pass the size explicitly, create a temporary byte buffer, then use memcpy three times to rotate the bit patterns. VLA char buffer[size] is a GCC thing, for a more portable version malloc the temp and free it. Stanford CS107, lecture 4

tetsuo

45,838 Aufrufe • vor 25 Tagen

.Lukky showcased the power of Godot 4.5's stencil buffer with a cool holographic display and shared the project for free. Check it out and learn more about how the stencil buffer works:

.Lukky showcased the power of Godot 4.5's stencil buffer with a cool holographic display and shared the project for free. Check it out and learn more about how the stencil buffer works:

80 LEVEL

29,287 Aufrufe • vor 11 Monaten

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

Dark Web Informer

71,713 Aufrufe • vor 2 Monaten

Secretary Rubio explained the Lebanese armed forces may have a willingness to address threats from Hezbollah, but they lack full capability. Rubio also discussed the buffer zone in southern Lebanon.

Secretary Rubio explained the Lebanese armed forces may have a willingness to address threats from Hezbollah, but they lack full capability. Rubio also discussed the buffer zone in southern Lebanon.

Trey Yingst

65,637 Aufrufe • vor 4 Monaten

** Sega Genesis 3D engine update 4 ** Never can leave a good rabbit hole undug ! .. updates since last update : Changed frame buffer from a VDP tile friendly buffer to a linear buffer which needs CPU translation , which speedup drawing a LOT not having to worry about tile boundaries albiet slows buffer sending to VRAM. The interior filling of triangles now is running at 1.5c ( 68k cycles ) per pixel ! however sending the buffer is twice as slow per byte as we need the CPU to send the buffer to VRAM to write to the tile format the VDP needs, rather than DMA directly to VRAM . Overall speedup 25% + as the drawing speedup is much greater than the frame buffer slow down. Optimised Line drawing and Triangle filling -near optimal now for the linear frame buffer. Triangle drawing might get a little bit more yet. Quad drawing is next on the list as that will speedup drawing quads. Some gains will come from been smart about partial clearing of RAM buffers and partial sending to VRAM buffers, rather than send the whole buffer. Vertice rotation and projection needs a lot of optimising .. i expect good gains to come from this - this is all in C at present and all calced in real time. Line and Triangle drawing are in assembly but all vertex manipulation is in C. #SGDK #MegaDrive #SegaGenesis

Sega Genesis 3D engine update 4 Never can leave a good rabbit hole undug ! .. updates since last update : Changed frame buffer from a VDP tile friendly buffer to a linear buffer which needs CPU translation , which speedup drawing a LOT not having to worry about tile boundaries albiet slows buffer sending to VRAM. The interior filling of triangles now is running at 1.5c ( 68k cycles ) per pixel ! however sending the buffer is twice as slow per byte as we need the CPU to send the buffer to VRAM to write to the tile format the VDP needs, rather than DMA directly to VRAM . Overall speedup 25% + as the drawing speedup is much greater than the frame buffer slow down. Optimised Line drawing and Triangle filling -near optimal now for the linear frame buffer. Triangle drawing might get a little bit more yet. Quad drawing is next on the list as that will speedup drawing quads. Some gains will come from been smart about partial clearing of RAM buffers and partial sending to VRAM buffers, rather than send the whole buffer. Vertice rotation and projection needs a lot of optimising .. i expect good gains to come from this - this is all in C at present and all calced in real time. Line and Triangle drawing are in assembly but all vertex manipulation is in C. #SGDK #MegaDrive #SegaGenesis

Shannon Birt

15,280 Aufrufe • vor 4 Monaten

Bruce Buffer and Michael Buffer linked up at the ESPYS yesterday 🤝❤️ 🎥 Bruce Buffer

Bruce Buffer and Michael Buffer linked up at the ESPYS yesterday 🤝❤️ 🎥 Bruce Buffer

Championship Rounds

1,989,916 Aufrufe • vor 1 Jahr

Some of the DOGE stimulus checks have a return address for a palace in Nigeria. Don’t tear it up. Deposit it in your account.

Some of the DOGE stimulus checks have a return address for a palace in Nigeria. Don’t tear it up. Deposit it in your account.

Piyush Mittal 🇺🇸🇺🇦🟧🌊🌈

58,859 Aufrufe • vor 1 Jahr

The GREATEST comeback in Presidential HISTORY! Tonight President Trump makes his return to the House floor to address Congress and the American people. 🇺🇸

The GREATEST comeback in Presidential HISTORY! Tonight President Trump makes his return to the House floor to address Congress and the American people. 🇺🇸

Speaker Mike Johnson

190,365 Aufrufe • vor 1 Jahr

Lavrov confirms that Russia has no intention on stopping at Donbas in Ukraine: "Russia needs a buffer zone. Let Ukraine become this buffer [between Russia and the West]."

Lavrov confirms that Russia has no intention on stopping at Donbas in Ukraine: "Russia needs a buffer zone. Let Ukraine become this buffer [between Russia and the West]."

Anton Gerashchenko

55,047 Aufrufe • vor 3 Tagen

$The new demo viewer in CS2 is SO good. Haven't seen anyone talk about this and found it last night. to open a demo, type "playdemo [demoname]" put your demos here: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\csgo$

The new demo viewer in CS2 is SO good. Haven't seen anyone talk about this and found it last night. to open a demo, type "playdemo [demoname]" put your demos here: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\csgo

bobby

520,523 Aufrufe • vor 3 Jahren

💥 Introducing "Januscape" (CVE-2026-53359) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization. "16 years" latent. Successfully used as a 0-day exploit in "Google kvmCTF". To the best of public knowledge, the first KVM exploit research triggerable on both Intel and AMD. Details:

💥 Introducing "Januscape" (CVE-2026-53359) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization. "16 years" latent. Successfully used as a 0-day exploit in "Google kvmCTF". To the best of public knowledge, the first KVM exploit research triggerable on both Intel and AMD. Details:

V4bel

61,920 Aufrufe • vor 2 Monaten