vulnerability-analysis

Vulnerability Analysis

Systematic identification and analysis of vulnerabilities in binary targets.

Vulnerability Classes

Analysis Process

1. Trace user input - Where does it enter? Where does it go?
2. Find sinks - Dangerous functions that consume input
3. Check bounds - Are there size limits? Are they enforced?
4. Check protections - What mitigations affect exploitation?

Dangerous Function Patterns

// Stack BOF
gets(buf);                    // No bounds
strcpy(dst, src);             // No bounds
sprintf(buf, fmt, ...);       // No bounds
scanf("%s", buf);             // No bounds

// Format String
printf(user_input);           // User controls format

// Command Injection
system(user_input);           // Direct command exec
popen(user_input, "r");       // Command exec

Mitigation Bypass Planning

Output

Produce context/vulnerability-analysis.md using the template.