• 0 Posts
  • 18 Comments
Joined 2 years ago
cake
Cake day: July 26th, 2023

help-circle


  • Do you know what a memory stack and assembly are?

    If you want code that does assembly operations A, B, and then C, you might be able to accomplish it by scanning loaded memory (or its corresponding binary) for bits that, when translated into assembly, do:

    A

    D

    return

    This set of three instructions is a gadget. In practice, it’s a location in memory.

    And then you find another gadget.

    B

    C

    return

    Then, if you don’t care about D, or D does something irrelevant that won’t screw up what you’re trying to do, or won’t crash the program, you can replace the stack with the addresses of gadgets one and two. When gadget one returns, the stack is popped and then gadget two executes.

    Since the computer did ADBC and D was irrelevant, the system executed your ABC malware and now you win.

    Is finding gadgets that execute actual malware hard? Surprisingly not!



  • You may benefit from watching cgpgrey’s keys to power video. The people who you need to gain power are not the same as those needed to maintain it. So a dictator will seize power and kill off all the people who helped him, because money going to those people is money not going to the people who can overthrow you, which is loot that can be promised to them by rivals trying to take your job.

    You outlived your usefulness. They have no interest in the long term growth of the company - their job was to get a return on their investment and that means inflating the value at a point in time so that they can cash out.