Blog
topics in Computer science
Lab 1: Program Security Lab
This lab will be completed on our Linux CSE servers (i.e., cse01 – cse06).
bufOvfl.c was written that contains a function called privateFunction() whose only purpose is to print out a congratulatory message and display a secret code word. The operating system on each of our CSE machines has enabled stack protection (i.e., preventing “smashing the stack” attacks), so the source code was compiled with the –fno-stack-protector option to disable the stack protection for this activity. Without this compile option, our buffer overflow attack would result in the following error, even though done correctly:
bufOvfl executable is being provided to you in this assignment and your goal is to exploit the binary (i.e., executable) to print out the congratulatory message and secret code word by just modifying the input.
chmod u x bufOvfl):