Determine the shellcode needed to implement a return to system call attack that calls syst...

Determine the shellcode needed to implement a return to system call attack that calls system(“whoami; cat /etc/shadow; exit;”), targeting the same vulnerable program as used in Problem You need to identify the location of the standard library system() function on the target system by tracing a suitable test program with a debugger. You then need to determine the correct sequence of address and datavalues to use in the attack string. Experiment with running this attack.

Experiment with running the stack overflow attack using either the original shellcode from Figure or the modified code from Problem against an example vulnerable program. You will need to use an older O/S release that does not include stack protection by default. You will also need to determine the buffer and stack frame locations, determine the resulting attack string, and write a simple program to encode this to implement the attack.

Equivalent position-independent x86 assembly code

Use a matrix format to show the relationship between X.800 security services and security mechanisms. The matrix columns correspond to mechanisms and the matrix rows correspond to services. Each cell in the matrix should be checked, or not, to indicate whether the corresponding mechanism is used in providing the corresponding service.