Buffer overflow attack.
So before getting into overflow or floor attack, let's understand one basic concept.
Maybe it will be helpful for us to understand about buffer world from attack, OK?
To.
Just consider that this is a flawed.
And.
How?
Bucket.
OK.
And conserve this bucket can accommodate some 20 litres of water.
OK.
And.
And I'm just pouring water from here.
Okay, so let's get a look.
And so once a country is reporting it, it's getting awfully good looking.
So what happens once it fails, and if I'm keep on putting the water, OK, I'm just keep on pouring
pudding, pudding, pudding.
But now it is full, right?
So what happened?
Then it will overflow.
OK, so it will keep on workflow.
And if I'm not still stopping it and if I'm keep on putting here.
If I keep on quoting here, OK, just consider that I'm keep on putting here.
Then what happens this will be what floor?
OK.
So this is a what?
Similar to what happened if it was lost, then the floor also get.
This water.
Right?
So this is similar to what buffer or floor attack?
So so what happens?
Just consider, see or else is that is an application?
OK.
And you need to give you sediment past Perskie, the password.
And.
But if the user name should contain, OK, the user name should contain only a maximum of 12 characters.
OK, so you think it's sorry, 12 or 20, but there should be some different limit, OK, based on the
development of the web application?
OK.
So maximum 20 is right.
OK, so 20 maximum 20 characters.
It's the fixed low list.
Maybe you need to fix it, right?
Well, you just control that you're fixing.
20 is the limit maximum character for the user name.
And if it goes beyond that limit, then the web application should throw an error message saying that
your user name is beyond 20 character that we cannot process it.
OK, so maybe you can try with the different user name.
It should be added message.
You should throw out a message and allows the user to come with the new user name when he's registering
or trying to access it.
So instead of against it, if it does not giving any error message, what happens?
It will get.
That means if you are not fixing that, what happens?
It will get that input from a user and it buffer places only to accommodate 20 bits.
OK, just consider 20 characters.
It can accommodate one character and you're giving a user name with four p a character.
OK?
Or some 30.
Correct?
But what happens?
So the rest other 10 characters, right?
It will be 0.2.
They are just above us, and this is so this particular buffer gets pulled and it will float to that
JSON buffers.
And at the same time that the overflow, the extra space read the extra character that will also be
executed.
OK.
So if in case there is a chance that you just consider that the limit is 20 20 characters and you have
an attacker, he can include a malicious script to that input.
OK.
So what happens, Risto, other than this 20 character for 20 characters and this script, whatever
he injected rate it should actually it should throw an error message saying that it should not accept
it if it does more than 20 character.
OK, but if it accepts, then what happened?
The rest?
Apart from that, for 20 characters, it will be overflowing 2D ideas and buffers and that malicious
clip?
OK.
There is two things.
One is that malicious script will consume the memory from the buffer a decent buffers, and also it
starts to execute it.
OK, so once the script takes executed, then it will be compromised and it will start to work the way
that I could want to make it right.
So this is what a buffer overflow attack us.
Maybe let's go with the definition.
Once buffer overflow occurs, when a program or process tries to store more data in the temporary data
storage means, which is to be the first to buffer that that was designed to contain.
OK.
The result is that the extra information overflows into the adjacent buffer, which can corrupt and
overwrite the valid data.
So this is what we referred.
OK.
So when it all overflows the buffer scenes and then it will goes to, it's a decent buffer which will
override the existing thing and also the new things will be executed.
Script really executed look, buffer overflow is an increasingly common type of a security attack in
this type of attack.
Extra data may contain malicious code malicious code that's designed to trigger a specific action,
such as damaging files, releasing priority information and also if he want, we can copy that information.
After the information data's OK, he can gain more access to the data.
So whatever whatever thing he want, he can make use of it by injecting or by executing that malicious
script in the JASON before us.
So this is how a buffer overflow attack happens.