Video yükleniyor...

Video Yüklenemedi

Bu video yüklenirken bir sorun oluştu. Bu geçici bir ağ sorunundan kaynaklanıyor olabilir veya video kullanılamıyor olabilir.

Ana Sayfaya Dön

How a buffer overflow overwrites the return address, in C and x86-64.

tetsuo

237,694 subscribers

25,725 görüntüleme • 2 gün önce •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

10 Yorum

GD profil fotoğrafı

GD2 gün önce

Agenc!

why profil fotoğrafı

why2 gün önce

Seeing the exact offset from the buffer to saved RIP is usually the most useful part of these examples. It turns abstract memory corruption into something measurable.

Tree Lake Rain 🌲🦆🌦️ profil fotoğrafı

Tree Lake Rain 🌲🦆🌦️2 gün önce

c

not Arnold (Parody) 🔥💪 profil fotoğrafı

not Arnold (Parody) 🔥💪2 gün önce

How are you brotha?

Merdog profil fotoğrafı

Merdog2 gün önce

😉😉

kotora673 profil fotoğrafı

kotora6732 gün önce

C言語も、x86系とRISC系で書き方代えなきゃいけないのが邪魔くさい。

HexHolder profil fotoğrafı

HexHolder2 gün önce

A nice explanation of a buffer overflow

Rory profil fotoğrafı

Rory2 gün önce

cool stuff, Tetsuo

Andreas Zottsen profil fotoğrafı

Andreas Zottsen2 gün önce

Thanks for the video! So the while loop, where the exit from the loop depends on user input, is the very "stinky" spot in the C language that leads to big problems. If you avoid it, there won’t be any problems, right?

NG+ profil fotoğrafı

NG+2 gün önce

@tetsuoai salut Est ce qu’un article existe pour ce sujet ?ça m’intéresse beaucoup

Benzer Videolar

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

ACE Responder

21,289 görüntüleme • 1 yıl önce

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

ACE Responder

37,433 görüntüleme • 3 yıl önce

More buffer overflow practice using Claude Code and Binary Ninja to assist.

More buffer overflow practice using Claude Code and Binary Ninja to assist.

Matt Brown

30,555 görüntüleme • 8 ay önce

x86 segmentation maps memory references through segment registers. It is still used in modern x86-64 for FS/GS, especially thread-local storage and kernel per-CPU data. In sandboxing, segmentation can restrict untrusted code to a fixed memory region. MIT 6.858.

x86 segmentation maps memory references through segment registers. It is still used in modern x86-64 for FS/GS, especially thread-local storage and kernel per-CPU data. In sandboxing, segmentation can restrict untrusted code to a fixed memory region. MIT 6.858.

tetsuo

17,558 görüntüleme • 3 ay önce

i built an entire x86 CPU emulator in CSS (no javascript) you can write programs in C, compile them to x86 machine code with GCC, and run them inside CSS

i built an entire x86 CPU emulator in CSS (no javascript) you can write programs in C, compile them to x86 machine code with GCC, and run them inside CSS

Rebane

1,076,556 görüntüleme • 6 ay önce

AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow) we will release PoC post disclosure and patch

AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow) we will release PoC post disclosure and patch

V12

131,652 görüntüleme • 2 ay önce

To build a generic swap in C, pass the size explicitly, create a temporary byte buffer, then use memcpy three times to rotate the bit patterns. VLA char buffer[size] is a GCC thing, for a more portable version malloc the temp and free it. Stanford CS107, lecture 4

To build a generic swap in C, pass the size explicitly, create a temporary byte buffer, then use memcpy three times to rotate the bit patterns. VLA char buffer[size] is a GCC thing, for a more portable version malloc the temp and free it. Stanford CS107, lecture 4

tetsuo

45,838 görüntüleme • 25 gün önce

.Lukky showcased the power of Godot 4.5's stencil buffer with a cool holographic display and shared the project for free. Check it out and learn more about how the stencil buffer works:

.Lukky showcased the power of Godot 4.5's stencil buffer with a cool holographic display and shared the project for free. Check it out and learn more about how the stencil buffer works:

80 LEVEL

29,287 görüntüleme • 11 ay önce

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

Dark Web Informer

71,713 görüntüleme • 2 ay önce

Secretary Rubio explained the Lebanese armed forces may have a willingness to address threats from Hezbollah, but they lack full capability. Rubio also discussed the buffer zone in southern Lebanon.

Secretary Rubio explained the Lebanese armed forces may have a willingness to address threats from Hezbollah, but they lack full capability. Rubio also discussed the buffer zone in southern Lebanon.

Trey Yingst

65,637 görüntüleme • 4 ay önce

** Sega Genesis 3D engine update 4 ** Never can leave a good rabbit hole undug ! .. updates since last update : Changed frame buffer from a VDP tile friendly buffer to a linear buffer which needs CPU translation , which speedup drawing a LOT not having to worry about tile boundaries albiet slows buffer sending to VRAM. The interior filling of triangles now is running at 1.5c ( 68k cycles ) per pixel ! however sending the buffer is twice as slow per byte as we need the CPU to send the buffer to VRAM to write to the tile format the VDP needs, rather than DMA directly to VRAM . Overall speedup 25% + as the drawing speedup is much greater than the frame buffer slow down. Optimised Line drawing and Triangle filling -near optimal now for the linear frame buffer. Triangle drawing might get a little bit more yet. Quad drawing is next on the list as that will speedup drawing quads. Some gains will come from been smart about partial clearing of RAM buffers and partial sending to VRAM buffers, rather than send the whole buffer. Vertice rotation and projection needs a lot of optimising .. i expect good gains to come from this - this is all in C at present and all calced in real time. Line and Triangle drawing are in assembly but all vertex manipulation is in C. #SGDK #MegaDrive #SegaGenesis

Sega Genesis 3D engine update 4 Never can leave a good rabbit hole undug ! .. updates since last update : Changed frame buffer from a VDP tile friendly buffer to a linear buffer which needs CPU translation , which speedup drawing a LOT not having to worry about tile boundaries albiet slows buffer sending to VRAM. The interior filling of triangles now is running at 1.5c ( 68k cycles ) per pixel ! however sending the buffer is twice as slow per byte as we need the CPU to send the buffer to VRAM to write to the tile format the VDP needs, rather than DMA directly to VRAM . Overall speedup 25% + as the drawing speedup is much greater than the frame buffer slow down. Optimised Line drawing and Triangle filling -near optimal now for the linear frame buffer. Triangle drawing might get a little bit more yet. Quad drawing is next on the list as that will speedup drawing quads. Some gains will come from been smart about partial clearing of RAM buffers and partial sending to VRAM buffers, rather than send the whole buffer. Vertice rotation and projection needs a lot of optimising .. i expect good gains to come from this - this is all in C at present and all calced in real time. Line and Triangle drawing are in assembly but all vertex manipulation is in C. #SGDK #MegaDrive #SegaGenesis

Shannon Birt

15,280 görüntüleme • 4 ay önce

Bruce Buffer and Michael Buffer linked up at the ESPYS yesterday 🤝❤️ 🎥 Bruce Buffer

Bruce Buffer and Michael Buffer linked up at the ESPYS yesterday 🤝❤️ 🎥 Bruce Buffer

Championship Rounds

1,989,916 görüntüleme • 1 yıl önce

Some of the DOGE stimulus checks have a return address for a palace in Nigeria. Don’t tear it up. Deposit it in your account.

Some of the DOGE stimulus checks have a return address for a palace in Nigeria. Don’t tear it up. Deposit it in your account.

Piyush Mittal 🇺🇸🇺🇦🟧🌊🌈

58,859 görüntüleme • 1 yıl önce

The GREATEST comeback in Presidential HISTORY! Tonight President Trump makes his return to the House floor to address Congress and the American people. 🇺🇸

The GREATEST comeback in Presidential HISTORY! Tonight President Trump makes his return to the House floor to address Congress and the American people. 🇺🇸

Speaker Mike Johnson

190,365 görüntüleme • 1 yıl önce

Lavrov confirms that Russia has no intention on stopping at Donbas in Ukraine: "Russia needs a buffer zone. Let Ukraine become this buffer [between Russia and the West]."

Lavrov confirms that Russia has no intention on stopping at Donbas in Ukraine: "Russia needs a buffer zone. Let Ukraine become this buffer [between Russia and the West]."

Anton Gerashchenko

55,047 görüntüleme • 3 gün önce

$The new demo viewer in CS2 is SO good. Haven't seen anyone talk about this and found it last night. to open a demo, type "playdemo [demoname]" put your demos here: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\csgo$

The new demo viewer in CS2 is SO good. Haven't seen anyone talk about this and found it last night. to open a demo, type "playdemo [demoname]" put your demos here: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\csgo

bobby

520,523 görüntüleme • 3 yıl önce

💥 Introducing "Januscape" (CVE-2026-53359) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization. "16 years" latent. Successfully used as a 0-day exploit in "Google kvmCTF". To the best of public knowledge, the first KVM exploit research triggerable on both Intel and AMD. Details:

💥 Introducing "Januscape" (CVE-2026-53359) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization. "16 years" latent. Successfully used as a 0-day exploit in "Google kvmCTF". To the best of public knowledge, the first KVM exploit research triggerable on both Intel and AMD. Details:

V4bel

61,920 görüntüleme • 2 ay önce