Question

What us control hijacking? Explain

Answer 1

Answer:

US CONTROL HIJACKING

Explanation:

A control-hijacking attack overwrites some data structures in a victim program that affect its control flow, and eventually hijacks the control of the program and possibly the underlying system. ... It causes some of that data to leak out into other buffers, which can corrupt or overwrite whatever data they were holding.

HOPE IT WILL HELP YOU

Answer 2

Control hijacking attacks

Attacker’s goal:

! Take over target machine (e.g. web server)

" Execute arbitrary code on target by

hijacking application control flow

This lecture: three examples.

! Buffer overflow attacks

! Integer overflow attacks

! Format string vulnerabilities

What is needed

Understanding C functions and the stack

Some familiarity with machine code

Know how systems calls are made

The exec() system call

Attacker needs to know which CPU and OS are running on

the target machine:

! Our examples are for x86 running Linux

! Details vary slightly between CPUs and OSs:

" Little endian vs. big endian (x86 vs. Motorola)

" Stack Frame structure (Unix vs. Windows)

" Stack growth direction