View Full Version : security holes,and programming exploits


Roberto Ramsis
Hello
long ago,there was a security section,i just hoped it would still be there,but i guess programming is one of best interests.
i have 1 problem.i know c since about 4 years but was never able to use it in something useful!
i am working this vacation in learning sockets programming
but i was wondering about programming exploits,i mean how do u guys know that kde has less holes than gnome or whatever?
besides how do u get to know how can u make code to use this security hole?
i know this topic is toooo big to be discussed
and resources in security field isn't that easy to find on net
plz point some resources to me ,or give me a brief idea
Thanks soooo much in advance for everyone.
Bye

angoranimi
search for:
Smashing the stack for fun and profit. (Elias Levy aka aleph1)
Format string exploits (TESO team)

that should be a good start, when you're done, move forward to searching for heap overflows and more advanced topics.

For a more Cprogramming-oriented point of view, have a look at:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/developers-handbook/secure.html

jitter
Secure Programming Should be The aim of learning such a thing ,so if you consider learning security related programming , aim at that .

Say you wanna Find Bugs,Vulnerabilities in application for security concerns , you have to Know How its done right , and then if done wronly , how can it be used , so get a paper,book about secure programming , and then get others for Using programming mistakes like those angoranimi pointed to .

there are many common mistakes , coders look at to use and these are documented well , and the methods diverse , if your looking at an open source app or a closed one , So as any subject anyone wanna learn, you have to look at it right , and take the right approach , which i explained earlier , and Google is your friend .