远程缓冲区溢出攻击及防护

Remote Buffer Overflow Attack and Prevention

介绍了Linux系统下缓冲区溢出的原理和shellcode具体实现方法。阐述了远程shellcode从C代码到机器码的编写过程,并从成功率角度对攻击方法进行了分析。利用red hat9.0上的漏洞程序对shellcode进行了测试。对缓冲区溢出常用的防护措施进行了分析,提出了应对远程shellcode的基本方法。

This article introduces the principle of buffer overflow and the detailed methods on how to program shellcode on the Linux system, elaborates the process of remote shellcode from C code to machine code, and analyzes attack methods from the aspect of success rate. The shellcode has been tested in red hat 9.0 with the flaw procedure. At last, this paper analyzes the common prevention measures of buffer overflow, and proposes a basic method to use shellcode.