基于shellcode分析缓冲区溢出攻击  

Analyzing the buffer overflow attack by shellcode

作　　者：刘佳琳 谭振江[1] 朱冰[1] Liu Jialin;Tan Zhenjiang;Zhu Bing(College of Computer Science,Jilin Normal University,Siping,Jilin 136000,China)

机构地区：[1]吉林师范大学计算机学院

出　　处：《计算机时代》2020年第2期43-46,共4页Computer Era

基　　金：吉林师范大学学术型研究生创新科研计划项目(研创新201951研创新201634);赛尔网络下一代互联网技术创新项目(NGII20180408)

摘　　要：缓冲区的本质是内存中的一个片段,它用于暂时存放输入与输出的数据或者代码。缓冲区溢出是一种非常危险的漏洞,在各种应用软件及操作系统中广泛存在。如果攻击者发现目标主机存在缓冲区溢出漏洞,攻击者会利用该漏洞,执行恶意代码,最终获取被攻击主机的控制权,窃取有价值的信息。文章利用实际案例讲解shellcode的形成过程,分析缓冲区溢出攻击发生的危害及原因。The essence of a buffer is a fragment in memory that is used to temporarily store input or output data or code. Buffer overflow is a very dangerous vulnerability that is widespread in a variety of applications and operating systems. If an attacker finds a buffer overflow vulnerability on the target host, the attacker exploits the vulnerability, executes malicious code, and finally gains control of the attacked host and steals valuable information. This paper uses the actual case to explain the formation process of shellcode, analyze the hazards and causes of buffer overflow attacks.

关 键 词：SHELLCODE 缓冲区溢出 缓冲区溢出攻击 控制权 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]