added slides
authorChristian Urban <christian dot urban at kcl dot ac dot uk>
Tue, 22 Oct 2013 14:47:43 +0100
changeset 121 01f7e799e6ce
parent 120 99d408cfcfb3
child 122 f0e51ffd2965
added slides
slides/slides04.pdf
slides/slides04.tex
Binary file slides/slides04.pdf has changed
--- a/slides/slides04.tex	Tue Oct 22 12:35:11 2013 +0100
+++ b/slides/slides04.tex	Tue Oct 22 14:47:43 2013 +0100
@@ -116,7 +116,7 @@
 
 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 \begin{frame}[fragile]
-\frametitle{Buffer Overflows}
+\frametitle{D-Link Router, Buffer Overflows}
 
 \begin{verbatim}
 As a proof-of-concept, the following URL allows 
@@ -126,7 +126,7 @@
 
  curl http://<target ip>/post_login.xml?hash=AAA...AAABBBB
 
-The value of the "hash" HTTP GET parameter consists in 
+The value of the "hash" HTTP GET parameter consists of
 292 occurrences of the 'A' character, followed by four 
 occurrences of character 'B'. In our lab setup, characters 
 'B' overwrite the saved program counter (%ra).