And Lou everybody when it comes to my advanced ethical hacking networking penetration testing goes
disputing who will call her the concept of a buffer overflow.
Here we are moving just to tell you what is a buffer overflow and then how it works.
What is the countermeasures that you can take so that we can avoid being affected from this kind of
attack.
Okay.
First thing first as you see buffer is a memory.
Oh yeah.
Which old data which holds the information for overflow is a situation arises when you try to put the
data in new way which is more than the size of the airway and you haven't put any exceptions or anything.
What I mean by that.
Okay.
So you keep on feeling away way but if the time comes when your airway ends and you overweight what
was there you know this is like a base which has in the amount of size and the data which is sent there
of both the size of the debt of the recipient.
Okay.
Here you here we can see that.
So you can say buffer overflow of buffer over one as we say it is a colon sort of coding mistake that
an attacker could exploit to gain access through a system or to make your system known which your you
know to effectively mitigate buffer overflow vulnerabilities.
It is crucial to understand exactly what they are what the danger is they can pose and they can keep
to a system.
And what techniques attackers that are so used to successfully again gain control of your computer or
off your devices.
This was all going.
There is more data in it for that.
Okay.
So we see that already and this vulnerability can cause a system crash worse quit and then try upwind
for a cyber attack.
And then if you're a Windows user sometimes if you go to a desk manager you can control how much discipline
is moving up moving down.
We are moving down OK in the next few minutes we are going to elaborate more about how it works.
OK.
C C and C++ most susceptible to buffer overflow security from endpoints should include regular testing
to detect and fix them.
So these appointees includes automatic protection language level and balance checking at time.
And here there are some Web application software that are allowing there in the network to that you
can try to test your application before she'd be before to make it available to the public.
OK.
So here this is not a definition guys.
So you can go to the Internet and then just try to type what is a buffer overflow how it works.
Stuff like that.
Yeah you get and then buffer overflow attack in some cases the anniversary can create a payload called
it and then removed it has been co-opted by do overflow in an other case the attacker simply takes advantage
of the of the overflow and it's co-option of the projects in we.
Let's consider a program that we kissed a user password in order to go into areas or access to this
system and the code below.
So we are going to explain you how that might get the wood privileges.
I mean to escalate the privileges is it this is the password is encoded and it will come within that
and go into new user privileges.
Okay let's see.
Okay.
And in the code below.
So do call it password going to the user what privileges.
And then if the password is not call it the program will let it go and things are privileges.
OK.
So when if a Common App as you can see in C++ or Java or you can type these it's for displaying your
stream text or your or your palm reader is OK.
And the passed equal one to if past is due or is one then.
Now give would wide to use it.
And this is the message display.
And we turn will.
And so it determines how it set out.
However there is a possibility open for overflow in this program because they get the gates function
does not check the bounds.
This is fairly valuable important.
Here is an example of what an attacker could do with this code called Dodd the F overflow into the password
something he writes and then one password which would privileges given to the user in the above example.
It began with D.
Use the would privileges even though the user until it encoded password and in this case the attacker
show pride.
Here.
So we were talking about some applications which are allowing dealing in their weapons so that we can
use them to test all codes or to test or open come first then defined the binary static application
security testing technology analyzes all codes.
So what did supplements static application security testing supplements to it.
Modelling in code we view is performed by different pros or by programmers.
Fi finding codes equal an omission more quickly and omission and omissions more quickly and in a lower
cost via automation.
It's typically one in the early phases of software development lifecycle because it's easier and less
expensive to fix those problems before going into the production deployment.
So SS has a very good cool quote ability to take to identifies so many where no one attack like a secured
injection express this attack buffer overflows and so and so and so on.
So to get much more information about it you can try to visit this link and then you will find maybe
more information fairly important guys I'll require you to check out it all right.
So now knowing all this stuff what is a buffer overflow.
How it works.
Now it's the time to know how to protect yourself or how to take their word against the buffer overflow.
Okay.
So first of all we have it kind of made or we can have a hardware device IED as if the intrusion detection
system or intrusion detection system was in network in some particular or computer devices.
So you can set up an intrusion detection system an intrusion prevention system so that they prevent
the sound the second point is to try to always create a village stone cold before going into it by yourself.
Don't leave the space where they shouldn't be and then try to always secure your application so that
the attacker doesn't find the place to inject code or to get an advantage from you because by doing
so by letting the attacker of all of this who rules on all his vulnerabilities I'm telling you he's
not your boy.
So he's going to exploit your predations when you and get control of it or try to make his own stuff.
So always be careful.
Indecision cookies.
Some some information might be there.
For example the name or the address of the location address or any other teens even some password can
be hidden in some cookies.
But that's why I would ask you to always take care of them.
Okay so this cookie inform us and we'll be all be served by the program so that maybe one of them executed
you can go to start page here or to go on and download this tool.
So this tool you can use it just to verify or to check to make sure that your program which you are
using on your machine has no vulnerabilities related to for overflow.
That can be one meter of every protection from buffer overflow.
It's really hard for
so the last part is that so you can always keep checking your dog files so that if ever any kind of
attack has been happening on your system by doing so then finally you really get the information and
then by getting those does that information you would control that.
What about the reason why it made me to have this kind of attack.
If you get all these information in apparent over and so you can complete the qualities and then you
can maintain the security level at the top because not only you know that something went one but you
know the reason that that thing went well.
This is really important.
Cybersecurity.
Oh yeah.
Because it says that when you get to not a problem.
So even if that problem is not solved yet but it's solved in half because you already and because you
already know the problem.
So when if you know a problem it's you are in a way of solving it.
Okay now let's give a report of how to yes product position with index non executive bar and X the execution
disable features.
It is a technology used in simple you.
It used to be you is already is right.
Did you enjoy any of your computer for storing that or for enabling your computer to run smoothly without
any kind of problem.
No.
So if you're simply you is too high.
So your computer might get freezing in some Nix videos.
We will of course show you how to distribution attack on a distribution denial of service can make your
computer be P.C..
So as always we have to take care of OCP you need to know how the fluctuation is it all right.
In this part of this video that we really think that we we try to show you.
What does that mean before overthrowing for over a.
And then how it works how the attack might get current on your system and tell me how to prevent yourself.
So we are very down to having you.
We are happy to explain you all these guys.
So see you in the next video.
Thank you.