diff -r f76e1456b365 -r 76f9457b8f51 hws/hw03.tex --- a/hws/hw03.tex Fri Sep 30 19:55:35 2016 +0100 +++ b/hws/hw03.tex Tue Oct 04 13:44:05 2016 +0100 @@ -25,6 +25,8 @@ \item Why does randomising the addresses from where programs are run help defending against buffer overflow attacks? +\item What is a format string attack? + \item Assume format string attacks allow you to read out the stack. What can you do with this information? (Hint: Consider what is stored in the stack.) @@ -37,7 +39,9 @@ \item When filling the buffer that is attacked with a payload (starting a shell), what is the purpose of -padding the string at the beginning with NOP-instructions. +padding the string at the beginning with NOP-instructions. + +\item \POSTSCRIPT \end{enumerate} \end{document}