298 reputation
514
bio website
location
age
visits member for 3 years, 6 months
seen Aug 18 at 18:17

Apr
25
comment Sending binary data to gets()
Turns out $ cat SC - | ./victim works. See my answer below.
Apr
25
comment Sending binary data to gets()
@lgeorget Can you elaborate? $ cat SC | ./victim has the same problem because the EOF from the cat is seen by the shell, so it terminates.
Apr
25
comment Sending binary data to gets()
I use PuTTY... no idea how to get this "raw mode" you speak of. But if I could, that would solve my problem.
Nov
17
comment Execution of possibly harmful program on Linux
I really intended my comment as a joke, but if you really can use it, that would be amazing. Honestly, the LiveCD answer (with RAMdisk) is a great solution.
Nov
17
comment Execution of possibly harmful program on Linux
Just run the program in linux in a browser (bellard.org/jslinux). It's a very good sandbox. :)
Oct
29
comment How to find processor speed on Linux w/throttling
What systems does this work for? It worked for me on CentOs, but file does not exist on Ubuntu 10.04.
Oct
28
comment How to find processor speed on Linux w/throttling
Unf the analogous line for me (CentOs 6, 2.6.32-71.el6.x86 kernel), is CPU0: AMD Opteron(tm) Processor 4184 stepping 01.
Oct
21
comment Fragmentation and ext4
@Mat I'm worried that fallocate (or posix_fallocate) will take too long on some OSes, but I'll look into this; cheers.
Aug
20
comment Obtaining md5 during wget
Yes, something like this. I think the last > sign is an error, however (you can't redirect stdout twice).
Aug
20
comment Obtaining md5 during wget
@MaxMackie: It is definitely possible: since I'm downloading the entire file, wget could theoretically run it through MD5. Unf, it doesn't.
Apr
5
comment Need to execute javascript as a cron job… possible?
Thanks for the pointer, Joby, but it looks like PhantomJS requires Xvfb anyway (ie, it's not really headless) so I'm probably just going to use Firefox (which I don't have to build myself).
Feb
25
comment .dtors looks writable, but attempts to write segfault
I'm teaching a security class that involves breaking a series of vulnerable programs, but one exercise involves writing to .dtors to exec shellcode. It no longer works and I'm trying to track down the issue.