Penetration Testing mailing list archives
Re: Overflowing Scripts fail to work
From: "Gilles DEMARTY" <gilles.demarty () gmail com>
Date: Mon, 24 Apr 2006 08:30:57 +0200
2006/4/22, Paul Sebastian Ziegler <psz () observed de>:
Hallo list!
[snip]
Now when I'm running it I get no overflow at all:
Hi paul. It is the same for any language that doesn't need an initialisation before use. Python (but it's the same for Perl, or other kind of languages) initialize "enough space" to handle this String whichever the string length is. Even if you concatenate Strings, it would still "extends" the space of this String to handle it. It is most likely you would run to out of memory before being able to raise a BO on it that way. Don't misunderstand my point, It is still possible to do a buffer overflow with Python (see google "Buffer overflow python") but it is not as trivial as with C. Hope this helps. Gilles. ------------------------------------------------------------------------------ This List Sponsored by: Cenzic Concerned about Web Application Security? Why not go with the #1 solution - Cenzic, the only one to win the Analyst's Choice Award from eWeek. As attacks through web applications continue to rise, you need to proactively protect your applications from hackers. Cenzic has the most comprehensive solutions to meet your application security penetration testing and vulnerability management needs. You have an option to go with a managed service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm). Download FREE whitepaper on how a managed service can help you: http://www.cenzic.com/news_events/wpappsec.php And, now for a limited time we can do a FREE audit for you to confirm your results from other product. Contact us at request () cenzic com for details. ------------------------------------------------------------------------------
Current thread:
- Overflowing Scripts fail to work Paul Sebastian Ziegler (Apr 23)
- Re: Overflowing Scripts fail to work Don Bailey (Apr 24)
- Re: Overflowing Scripts fail to work Bill Weiss (Apr 24)
- Re: Overflowing Scripts fail to work Gilles DEMARTY (Apr 24)
- Re: Overflowing Scripts fail to work Peter Kosinar (Apr 25)