Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

How a buffer overflow overwrites the return address, in C and x86-64.

tetsuo

239,603 subscribers

49,577 views • 2 days ago •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

10 Comments

GD2 days ago

Agenc!

why2 days ago

Seeing the exact offset from the buffer to saved RIP is usually the most useful part of these examples. It turns abstract memory corruption into something measurable.

Tree Lake Rain 🌲🦆🌦️2 days ago

c

not Arnold (Parody) 🔥💪2 days ago

How are you brotha?

Merdog2 days ago

😉😉

kotora6732 days ago

C言語も、x86系とRISC系で書き方代えなきゃいけないのが邪魔くさい。

HexHolder2 days ago

A nice explanation of a buffer overflow

Rory2 days ago

cool stuff, Tetsuo

Andreas Zottsen2 days ago

Thanks for the video! So the while loop, where the exit from the loop depends on user input, is the very "stinky" spot in the C language that leads to big problems. If you avoid it, there won’t be any problems, right?

NG+2 days ago

@tetsuoai salut Est ce qu’un article existe pour ce sujet ?ça m’intéresse beaucoup

Related Videos

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

ACE Responder

21,289 views • 1 year ago

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

ACE Responder

37,433 views • 3 years ago

More buffer overflow practice using Claude Code and Binary Ninja to assist.

More buffer overflow practice using Claude Code and Binary Ninja to assist.

Matt Brown

30,555 views • 8 months ago

x86 segmentation maps memory references through segment registers. It is still used in modern x86-64 for FS/GS, especially thread-local storage and kernel per-CPU data. In sandboxing, segmentation can restrict untrusted code to a fixed memory region. MIT 6.858.

x86 segmentation maps memory references through segment registers. It is still used in modern x86-64 for FS/GS, especially thread-local storage and kernel per-CPU data. In sandboxing, segmentation can restrict untrusted code to a fixed memory region. MIT 6.858.

tetsuo

17,558 views • 3 months ago

i built an entire x86 CPU emulator in CSS (no javascript) you can write programs in C, compile them to x86 machine code with GCC, and run them inside CSS

i built an entire x86 CPU emulator in CSS (no javascript) you can write programs in C, compile them to x86 machine code with GCC, and run them inside CSS

Rebane

1,076,556 views • 6 months ago

AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow) we will release PoC post disclosure and patch

AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow) we will release PoC post disclosure and patch

V12

131,652 views • 2 months ago

To build a generic swap in C, pass the size explicitly, create a temporary byte buffer, then use memcpy three times to rotate the bit patterns. VLA char buffer[size] is a GCC thing, for a more portable version malloc the temp and free it. Stanford CS107, lecture 4

To build a generic swap in C, pass the size explicitly, create a temporary byte buffer, then use memcpy three times to rotate the bit patterns. VLA char buffer[size] is a GCC thing, for a more portable version malloc the temp and free it. Stanford CS107, lecture 4

tetsuo

45,838 views • 25 days ago

.Lukky showcased the power of Godot 4.5's stencil buffer with a cool holographic display and shared the project for free. Check it out and learn more about how the stencil buffer works:

.Lukky showcased the power of Godot 4.5's stencil buffer with a cool holographic display and shared the project for free. Check it out and learn more about how the stencil buffer works:

80 LEVEL

29,287 views • 11 months ago

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

Dark Web Informer

71,713 views • 2 months ago

Secretary Rubio explained the Lebanese armed forces may have a willingness to address threats from Hezbollah, but they lack full capability. Rubio also discussed the buffer zone in southern Lebanon.

Secretary Rubio explained the Lebanese armed forces may have a willingness to address threats from Hezbollah, but they lack full capability. Rubio also discussed the buffer zone in southern Lebanon.

Trey Yingst

65,637 views • 4 months ago

** Sega Genesis 3D engine update 4 ** Never can leave a good rabbit hole undug ! .. updates since last update : Changed frame buffer from a VDP tile friendly buffer to a linear buffer which needs CPU translation , which speedup drawing a LOT not having to worry about tile boundaries albiet slows buffer sending to VRAM. The interior filling of triangles now is running at 1.5c ( 68k cycles ) per pixel ! however sending the buffer is twice as slow per byte as we need the CPU to send the buffer to VRAM to write to the tile format the VDP needs, rather than DMA directly to VRAM . Overall speedup 25% + as the drawing speedup is much greater than the frame buffer slow down. Optimised Line drawing and Triangle filling -near optimal now for the linear frame buffer. Triangle drawing might get a little bit more yet. Quad drawing is next on the list as that will speedup drawing quads. Some gains will come from been smart about partial clearing of RAM buffers and partial sending to VRAM buffers, rather than send the whole buffer. Vertice rotation and projection needs a lot of optimising .. i expect good gains to come from this - this is all in C at present and all calced in real time. Line and Triangle drawing are in assembly but all vertex manipulation is in C. #SGDK #MegaDrive #SegaGenesis

Sega Genesis 3D engine update 4 Never can leave a good rabbit hole undug ! .. updates since last update : Changed frame buffer from a VDP tile friendly buffer to a linear buffer which needs CPU translation , which speedup drawing a LOT not having to worry about tile boundaries albiet slows buffer sending to VRAM. The interior filling of triangles now is running at 1.5c ( 68k cycles ) per pixel ! however sending the buffer is twice as slow per byte as we need the CPU to send the buffer to VRAM to write to the tile format the VDP needs, rather than DMA directly to VRAM . Overall speedup 25% + as the drawing speedup is much greater than the frame buffer slow down. Optimised Line drawing and Triangle filling -near optimal now for the linear frame buffer. Triangle drawing might get a little bit more yet. Quad drawing is next on the list as that will speedup drawing quads. Some gains will come from been smart about partial clearing of RAM buffers and partial sending to VRAM buffers, rather than send the whole buffer. Vertice rotation and projection needs a lot of optimising .. i expect good gains to come from this - this is all in C at present and all calced in real time. Line and Triangle drawing are in assembly but all vertex manipulation is in C. #SGDK #MegaDrive #SegaGenesis

Shannon Birt

15,280 views • 4 months ago

Bruce Buffer and Michael Buffer linked up at the ESPYS yesterday 🤝❤️ 🎥 Bruce Buffer

Bruce Buffer and Michael Buffer linked up at the ESPYS yesterday 🤝❤️ 🎥 Bruce Buffer

Championship Rounds

1,989,916 views • 1 year ago

Some of the DOGE stimulus checks have a return address for a palace in Nigeria. Don’t tear it up. Deposit it in your account.

Some of the DOGE stimulus checks have a return address for a palace in Nigeria. Don’t tear it up. Deposit it in your account.

Piyush Mittal 🇺🇸🇺🇦🟧🌊🌈

58,859 views • 1 year ago

The GREATEST comeback in Presidential HISTORY! Tonight President Trump makes his return to the House floor to address Congress and the American people. 🇺🇸

The GREATEST comeback in Presidential HISTORY! Tonight President Trump makes his return to the House floor to address Congress and the American people. 🇺🇸

Speaker Mike Johnson

190,365 views • 1 year ago

Lavrov confirms that Russia has no intention on stopping at Donbas in Ukraine: "Russia needs a buffer zone. Let Ukraine become this buffer [between Russia and the West]."

Lavrov confirms that Russia has no intention on stopping at Donbas in Ukraine: "Russia needs a buffer zone. Let Ukraine become this buffer [between Russia and the West]."

Anton Gerashchenko

55,684 views • 3 days ago

$The new demo viewer in CS2 is SO good. Haven't seen anyone talk about this and found it last night. to open a demo, type "playdemo [demoname]" put your demos here: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\csgo$

The new demo viewer in CS2 is SO good. Haven't seen anyone talk about this and found it last night. to open a demo, type "playdemo [demoname]" put your demos here: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\csgo

bobby

520,523 views • 3 years ago

💥 Introducing "Januscape" (CVE-2026-53359) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization. "16 years" latent. Successfully used as a 0-day exploit in "Google kvmCTF". To the best of public knowledge, the first KVM exploit research triggerable on both Intel and AMD. Details:

💥 Introducing "Januscape" (CVE-2026-53359) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization. "16 years" latent. Successfully used as a 0-day exploit in "Google kvmCTF". To the best of public knowledge, the first KVM exploit research triggerable on both Intel and AMD. Details:

V4bel

61,931 views • 2 months ago