Revise the code to place a malicious code (shellcode) at the end of "afile" and then store the shellcode on the stack to run.

Database System Concepts
7th Edition
ISBN:9780078022159
Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Chapter1: Introduction
Section: Chapter Questions
Problem 1PE
icon
Related questions
Question

Answer the given question with a proper explanation and step-by-step solution.

 Please answer this C buffer overflow question 

Revise the code to place a malicious code (shellcode) at the end of "afile" and then store
the shellcode on the stack to run.
Transcribed Image Text:Revise the code to place a malicious code (shellcode) at the end of "afile" and then store the shellcode on the stack to run.
1 #include <stdlib.h>
2 #include <stdio.h>
3 #include <string.h>
5 int ssp(char *str)
6- {
7
8
9
10
char buffer[100];
strcpy(buffer, str);
return 1;
11 }
12
13 int main(int argc, char **argv)
14-{
25 }
26
char str[400];
FILE *afile;
15
16
17
18
afile = fopen("afile", "r");
19 fread(str, sizeof(char), 400, afile);
ssp(str);
20
21
22
23
24
printf("Returned Properly\n");
return 1;
Transcribed Image Text:1 #include <stdlib.h> 2 #include <stdio.h> 3 #include <string.h> 5 int ssp(char *str) 6- { 7 8 9 10 char buffer[100]; strcpy(buffer, str); return 1; 11 } 12 13 int main(int argc, char **argv) 14-{ 25 } 26 char str[400]; FILE *afile; 15 16 17 18 afile = fopen("afile", "r"); 19 fread(str, sizeof(char), 400, afile); ssp(str); 20 21 22 23 24 printf("Returned Properly\n"); return 1;
Expert Solution
trending now

Trending now

This is a popular solution!

steps

Step by step

Solved in 3 steps with 1 images

Blurred answer
Knowledge Booster
Stack operations
Learn more about
Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-science and related others by exploring similar questions and additional content below.
Similar questions
Recommended textbooks for you
Database System Concepts
Database System Concepts
Computer Science
ISBN:
9780078022159
Author:
Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:
McGraw-Hill Education
Starting Out with Python (4th Edition)
Starting Out with Python (4th Edition)
Computer Science
ISBN:
9780134444321
Author:
Tony Gaddis
Publisher:
PEARSON
Digital Fundamentals (11th Edition)
Digital Fundamentals (11th Edition)
Computer Science
ISBN:
9780132737968
Author:
Thomas L. Floyd
Publisher:
PEARSON
C How to Program (8th Edition)
C How to Program (8th Edition)
Computer Science
ISBN:
9780133976892
Author:
Paul J. Deitel, Harvey Deitel
Publisher:
PEARSON
Database Systems: Design, Implementation, & Manag…
Database Systems: Design, Implementation, & Manag…
Computer Science
ISBN:
9781337627900
Author:
Carlos Coronel, Steven Morris
Publisher:
Cengage Learning
Programmable Logic Controllers
Programmable Logic Controllers
Computer Science
ISBN:
9780073373843
Author:
Frank D. Petruzella
Publisher:
McGraw-Hill Education