ASLR, PIE Bias, and a Lab Pointer Leak

/proc/self/maps across runs, gdb measurement of PIE load bias, a toy %p leak of a text pointer. Entropy is what remains after the leak — no exploit chain.

November 20, 2019 · 8 min · 1558 words · Jose Adalberto Gutierrez Ochoa

Format String Lab: Leak, Crash, and the %s Patch

Toy printf(user) lab: gdb dump of stack words matching a %p leak (canary included conceptually), SIGSEGV from %s, ASan on a sprintf companion, patched printf("%s", user).

May 8, 2019 · 8 min · 1565 words · Jose Adalberto Gutierrez Ochoa