CS 231: Computer Security

Buffer overflow lab

In a terminal, login to thacker: ssh yourusername@thacker.mathcs.carleton.edu

In a browser, go to this tutorial on buffer overflows and work through it.

Collect questions for discussion in the second half of today's class.

Here are links to the source files from the tutorial:

• auth_overflow.c (i.e. the one with "Access Granted").
• program2.c (i.e. the one that just copies argv[1] into buffer and then prints it).
• program3.c (i.e. the one with getenv).
• shellcode.txt (i.e. the one with getenv).