正在加载视频...
视频加载失败
Over 90 binary exploitation challenges with detailed writeups. From your first buffer overflow to House of Orange. All free. All open source tools. Assembly fundamentals. Ghidra. GDB. pwntools. Stack overflows through every mitigation bypass: ASLR, PIE, NX, canaries, RELRO. ROP chains: static, dynamic, ret2csu, SROP, stack pivoting, partial overwrites.... show more
23,184 次观看 • 13 天前 •via X (Twitter)
0 条评论
暂无评论
原始帖子的评论将显示在这里
![Use SuperGrok to check your C code for vulnerabilities. Here is a prompt you can give to Grok with your code. >>> You are an expert Exploit Developer with a deep understanding of the C programming language and secure coding practices. Your role is to thoroughly review the provided C code for security vulnerabilities, adherence to best practices, and potential improvements. Think step-by-step through the analysis: first, understand the code's purpose and structure; second, check each security guideline; third, identify issues with examples from the code; fourth, suggest fixes; and finally, provide a summary. Use the following guidelines to evaluate the code. Ensure your response covers all of them explicitly: Follow OWASP and CERT Guidelines: Verify compliance with secure coding standards from OWASP and CERT, including input sanitization, secure defaults, and least privilege. Input Validation: All inputs must be validated before use, with multiple layers of checks for type, length, format, and range. Secure Error Handling: Implement secure behavior on error conditions, including comprehensive error codes for different failure types, safe error reporting functions, and graceful handling of partial failures without undefined behavior. Principle of Least Privilege: Functions should only access what they need, with clear separation of concerns. Integer Overflow Protection: Include checks for size calculations against SIZE_MAX, array index bounds validation, and safe arithmetic operations. Format String Attack Prevention: Avoid user-controlled format strings; use safe printing functions and proper string handling without printf vulnerabilities. Defensive Programming: Validate all inputs consistently, use early returns on invalid conditions, and implement fail-safe defaults. Memory Management: Ensure consistent allocation/deallocation patterns, check all allocations for failure, proper cleanup on error paths, and no memory leaks or double-frees. Parsing Robustness: Handle malformed inputs gracefully, maintain proper state management, avoid stack overflows from recursion, and use safe tokenization (e.g., with strtok_r). Security Test Cases: Cover null/empty inputs, oversized inputs, malformed data, UTF-8 validation to prevent encoding attacks, memory exhaustion limits, buffer overflows (bounds-checked string operations), integer overflows, and format string attacks. Performance Considerations: Minimize allocations, use efficient single-pass processing where possible, design for memory locality and cache efficiency, and fail fast on invalid inputs. Best Practices: Implement input sanitization, secure behavior on errors, least privilege, and defense in depth with multiple validation layers. [Insert the C code to review here] Analyze the code step-by-step, referencing line numbers where possible. For each guideline, state if it's met, explain why or why not, and suggest improvements if needed. End with an overall security rating (e.g., High/Medium/Low risk) and a revised version of the code if major issues are found. If the code is secure, confirm it meets all standards.](https://image.24vids.com/tw-1949908218995757312/amplify_video_thumb/1949906841615654912/img/Sll3dgW_IShv91Lw.jpg)
![🔥RFK Jr. rails against government “obliterating the Constitution” during Covid lockdowns: “If a government has the capacity to silence its critics, it has license for any atrocity. We saw during Covid… as soon as they realized that we were going to put up with being silenced, they went after all the other rights in the Constitution.” “I was the first person who was censored by the Biden administration [in January 2021], and that story is documented in the federal court decision by Judge Doughty. Judge Doughty’s 155-page decision detailed that 37 hours after he took the oath of office, President Biden’s White House was ordering the social media sites to remove my accounts. The White House invented a new word called ‘malinformation,’ which is information that is true, but nevertheless is inconvenient for government. So, I have a number of things to say about this… My first day in office, I’m going to issue an executive order ordering all federal employees to not collude with social media or media sites in censoring political speech in this country. I’m going to pardon Julian Assange and Edward Snowden my first day in office as a civics lesson to the American public about the importance of free speech and protecting whistleblowers rather than punishing and imprisoning them. Hamilton, Madison and Adams said that they put freedom of expression as the first amendment because all of the other rights that we enjoy are dependent on it. If a government has the capacity to silence its critics, it has license for any atrocity. We saw during Covid that immediately the government started censoring our speech... 41% of black-owned businesses that were shut during Covid will never re-open. We closed 3.3 million businesses with no due process, no just compensation, no scientific citation. Many of those businesses had three generations of equity in them. Three generations working to construct that business which was a fulcrum, an anchor or the community. We just shut them down without any public hearings. As soon as they realized that we were going to put up with being silenced, they went after all the other rights in the Constitution. The other part of the first amendment is freedom of worship. They shut down every church in this country for a year… Then they went after the right to assembly, they ordered us to socially distance. And two days ago in closed hearings with the Senate and the House, Anthony Fauci admitted… that the social distancing, he didn’t know where that came from, there was no science behind it. Then they went after jury trials. The seventh amendment says that no American shall be denied the right of a trial before a jury of his peers in cases and controversies exceeding $25 in value… It doesn’t say ‘except when there’s a pandemic.’ The Framers of the Constitution knew all about epidemics… but they did not put an exception for epidemics in the Constitution. They said the Constitution was written for hard times. It was written for inconvenient speech, not convenient speech. They went after our property rights, the fifth amendment. They closed all these businesses without due process, without just compensation. They went after the fourth amendment prohibitions against warrantless searches and seizures with all this track snd trace surveillance. They basically obliterated the Constitution, once they got rid of freedom of speech, they could do anything they wanted. The remedy for bad information is more information. It’s not government censorship.”](https://image.24vids.com/tw-1758549157780861011/amplify_video_thumb/1758543144587538433/img/YOOJ4Dw4h_qQAff9.jpg)
![WATCH: Trump's full answer on the federal judge's ruling about the East Wing ballroom construction... .New York Post’s Steven Nelson: “A judge just ordered you to stop construction of the ballroom. Are you planning to stop?” President Trump: “Well, we’ll appeal, but it’s not — I don’t know — it’s basically — I mean, I wrote [sic] — I wrote [sic] wrote part of his opinion. But basically he’s saying I need congressional approval. And he's so wrong. This is being financed privately. It’s a donation that's being given by companies, very rich companies, very rich people, so that, for 150 years, they’ve wanted a ballroom here. We’re going to have the finest ballroom, I believe, anywhere in the world. And he said we need congressional approval. Well, they don’t give congressional approval from the White House when they do things — they don’t — especially when, you know, we didn't ask for any tax money. We have no taxes — this is taxpayer free. We have no taxpayer putting up $0.10 and I see right here. Just write it out. He said we need congressional approval. Well, we've many things at the White House over the years and they don't get congressional approval when they build it in the White House. It’s just totally separate, especially when it's a donation. I mean, the ballroom is a donation. It's gotten great reviews. People love it. And presidents for 150 years have wanted this ballroom to be built because what we have president Xi or other presidents or prime minister is coming, we don’t have a big room. We have the East Room, which is very small and he said we need congressional approval. He also said, but this is positive for us — I'm allowed — meaning we — are allowed to continue building necessary to — let's see — what is that to — safety and security of the White House and its grounds. So, it says here very carefully the safety and security have to be protected in the White House grounds. Well, that’s what we’re doing because everything's bulletproof glass and center and center, including the ballroom and it goes, construction and all of the things necessary, it says, personal safety of the President and his staff are a part of that. So, it talks about that we’re allowed to continue building. In other words, he put an order on and — even that, he gave 14 days. We don't need it. Because that's what we're doing. He’s allowed to continue building as necessary and when it talks about the safety and security of the White House and its grounds. So, just — so, you know, I wrote some of the things we a drone proof roof and it talks about the president and its staff. Well, we don’t have a lot of bulletproof glass. The White House was built a long time ago. This has the highest level of — in fact, they call this graph — this grass — this — the glass — it's been a bulletproof and its ballistic prove. It's very thick. It’s like that. And it's going 45 feet high and every window is covered, every door is covered. The roof is drone-proof. We have secure air handling systems. You know, bad things happen in the air if you have bad people. We have bio defense all over. We have a secure telecommunications and communications all over. We have bomb shelters that we're building. We have a hospital and very major medical facilities that we’re building. We have all of these things. So, that's called I'm allowed to continue building as necessary. So, think of that — for the safety of the President ---- so we have all these things. So, on that, we’re okay. Where he's totally wrong and he made in a statement, that's fine, but we're really — I’ll give you an example. You have right here, $300 to 400 million depending on finishes. If I use very expensive, marble, if I use very expensive wall coatings, if I — I could bring it up to 400. Otherwise, we're right now ahead of schedule, we’re under budget. But depending on finishes from $300 to 400 million are being given by great people — people that you all know — rich people, companies, big companies, they wanted to see this bill because every president literally for 150 years as needed a space like this. Many of you have got to that tent when we have president of a big country or somebody being honored of great distinction. And they said in a tent. And, if it rains, you get so because the grass gets wet here very fast. It's a very wet area. They used to call it a wetland, But I guess don't do that from the White House, but it's essentially a wetland. And when it rains, you're in trouble. the water can go up to 3 to 4 inches over their shoes. That's not a good feeling for prince — what — who was Prince Charles, who will — who will be here next couple of weeks — is King Charles, who’s a great guy. We don't want him to sit in a pool of water and they've been wanting this for 100 — think of it — 150 years and we’re building it and it’s covered perfectly. What's not covered perfectly is the fact that the judge said we need congressional approval. Many things have built in the White House. They haven’t gotten congressional approval, especially when the money is being not put up by the taxpayer. The taxpayers aren’t putting up a dime. This building was necessary for many years by the fact that I've many ballrooms and I’ve built many things that I know how to build. I’m not building the Federal Reserve where the guy’s spending $4 billion for a tiny little building — $4 billion for the federal reserve building. That contractor’s going to be one of the richest men anywhere in the world after he finishes the Federal Reserve. The man is totally incompetent. Jerome “Too Late” Powell is totally incompetent. And he’s got to get out of office pretty fast. He's doing a bad job, but he’s also done a bad job in shepherding the construction in that building. You know, they ripped down the part of that building and it was a nice — they say it’s one of the nicest buildings in Washington. They ripped it down. So — so, we feel and we don't feel, we know that congressional approval is not necessary to put up a ballroom and with many things they’ve built on the site they never got congressional approval especially with the money is all put up — this is all donations by people that love our country that love the White House and that feel it was very necessary.”](https://image.24vids.com/tw-2039104631247176154/amplify_video_thumb/2039104445158486016/img/pRnDfm3Glnh65_1t.jpg)
