H
H
HMR2015-07-13 00:36:17
virtual box
HMR, 2015-07-13 00:36:17

Is there a difference between a buffer overflow in VirtualBox and real hardware?

Do not run the suggested files if you do not understand all the consequences of your actions

The question is this. Is there a difference between a buffer overflow in, for example, VirtualBox and real hardware?
What would not pour water test.
1) There is an old exploit for winrar 3.60 securityvulns.ru/Gnews880.html
There is a poc.rar code.
2) Old winrar 3.60
expirebox.com/download/7323278aeb93af568dbe2e05a87...
We check the rhinestone in virustotal :)
3) You need windows 7/8/10 x86 on real hardware. VirtualBox - I have it myself.
Actually, by opening this poc.rar with an old rar, does your console program load? Or WerFault falls out.
UPD
Host Windows XP3 32bit DEP
Guest Windows 7_1 32bit DEP
VirtualBox 5.0
Test.exe listing below. The string secret will only be on buffer overflow.
_____________________DEP on_________________DEP off__
Host(poc.rar)............not working............working
Host(test.exe). .........doesn't work...................
guestbook works (poc.rar)........doesn't work... ............ not working???
guestbook(test.exe)........ working??? ............works
Installing/removing Guest Additions has no effect.
-------------------------------------------------- --------------------------------
#include "stdio.h"
#include "string.h"
#pragma comment(linker, "/BASE:0x10400000")


char *esp="\xff\xd4";


int foo(char *in)
{
char temp[100];
memcpy(temp,in,strlen(in));
return 0;
}



int n()
{
printf("\n");
printf("secret");
return 0;
}



int main()
{
char temp[1024];
long p=(long)esp;
long f=(long)n;
memset(temp,0x90,sizeof(temp));
memcpy(temp+104,&p,sizeof(p));

memcpy(temp+104+sizeof(p),"\xb8",1);
memcpy(temp+104+sizeof(p)+1,&f,sizeof(f));
memcpy(temp+104+sizeof(p)+1+sizeof(f),"\xff\xd0",2);

printf("call esp: %p",p);

foo(temp);
return 0;
}

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question