From the course: CISSP Cert Prep (2021): 8 Software Development Security
Unlock the full course today
Join today to access over 22,600 courses taught by industry experts or purchase this course individually.
Overflow attacks
From the course: CISSP Cert Prep (2021): 8 Software Development Security
Overflow attacks
- [Instructor] When Software Engineers develop applications, they often set aside specific portions of memory to contain variable content. Users often provide answers to questions that are critical to the application's functioning and fill those memory buffers. If the developer fails to check that the input provided by the user is short enough to fit in the buffer, a buffer overflow occurs. The user content may overflow from the area reserved for input into an area used for other purposes and unexpected results may take place. The easiest way to show this is with an example. So let's go back to WebGoat. You can see here that we have an application handling wifi charges for hotel rooms. I'm also going to start up the zap proxy and then run through this page. I'm going to go ahead and enter my name and a hotel room number and then press submit. Here I am now in the zap proxy, which has intercepted my request.…
Contents
-
-
-
-
-
OWASP Top 105m 36s
-
Application security4m 13s
-
Preventing SQL injection4m 25s
-
Understanding cross-site scripting3m 17s
-
Request forgery4m 8s
-
Defending against directory traversal3m 6s
-
Overflow attacks3m 21s
-
Explaining cookies and attachments4m 25s
-
Session hijacking4m 8s
-
Code execution attacks2m 43s
-
Privilege escalation1m 56s
-
Driver manipulation2m 16s
-
Memory vulnerabilities3m 34s
-
Race condition vulnerabilities2m 13s
-
-
-
-