IFN657: Buffer Overflow - String - C program - IT Assignment Help

Assignment Task:

Overview 

This assessment is individual work to be submitted via Blackboard. While you can discuss the assessment with your tutors and peers, your submissions must be your own original work. 

The objective of this assessment is to gain practical experience with memory corruption security vulnerabilities through buffer overflow and format string attacks. This understanding is to be demonstrated by crafting simple exploits and describing the principles underpinning the exploitation. 

The vulnerable C programs can be found in the appendices, which must not be modified. They should be compiled and executed in a Linux environment as you did in the tutorials. In addition, you can use 32-bit binaries and turn off the stack protections as in the tutorials. Note that, although you can use gdb to help analyse the memory and instructions, your exploitation must work under the normal shell (not inside gdb). 

Buffer Overflow Tasks (12%) 

The C program bo.c (in Appendix A? takes a password from users, but never lets any user log in. 

Task 1 ?1%?. Point out the statement in the program that has a buffer overflow vulnerability and explain why it may cause a buffer overflow attack. 

Task 2 ?4%?. Figure out a password to make the program output “You are logged in!”, without modifying the return address. Explain in detail how the password works. 

Task 3 ?4%?. Figure out a password to make the program output “You are logged in!”, by modifying the return address. Explain in detail how the password works. 

Task 4 ?1%?. Explain how you can fix the buffer overflow vulnerability in the program. 

Task 5 ?2%?. Figure out a way to defeat ASLR ?Address Space Layout Randomisation) and still complete Task 3. Explain your answer. To turn on ASLR, you must run the following command and compile the program without the option 'no-pie'.

This IFN657: IT Assignment has been solved by our IT Experts at My Uni Paper. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our Experts are well trained to follow all marking rubrics & referencing style.

Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.