Exam SY0-601 topic 1 question 245 discussion

If I fail its because of all these dumb acronyms being thrown around

EIP is a register in x86 architectures (32bit). It holds the "Extended Instruction Pointer" for the stack. In other words, it tells the computer where to go next to execute the next command and controls the flow of a program.

Memory = buffer overflow

the key word is memory so i choose C.

No idea what EIP is, but fuzzing means bruteforcing the input validation. Also, he's checking memory, so buffer overflow is the only one that fits.

In this scenario, the penetration tester is trying to identify the location of the EIP (Extended Instruction Pointer) in memory by fuzzing the application. This is a common technique used to find vulnerabilities related to buffer overflows. A buffer overflow occurs when more data is written to a buffer than it can hold, causing the extra data to overflow into adjacent memory regions, potentially overwriting important data such as the EIP. By identifying the location of the EIP, the penetration tester can then attempt to control the execution flow of the program and potentially execute arbitrary code.

Buffer overflow = memory

Buffer overflow = memory

The penetration tester is planning to execute a buffer overflow attack. A buffer overflow attack is a type of security vulnerability that occurs when a program attempts to write data to a memory buffer that is too small to hold it. This can cause the program to crash or, in some cases, allow an attacker to execute arbitrary code. One way to identify where the EIP of the stack is located on memory is to use a technique called fuzzing, which involves sending large amounts of data to an application in order to identify areas where the application is vulnerable to buffer overflow attacks

EIP stands for Extended Instruction Pointer and is used to track the address of the current instruction running inside the application.

https://security.stackexchange.com/questions/129499/what-does-eip-stand-for EIP - 33 EIP is a register in x86 architectures (32bit). It holds the "Extended Instruction Pointer" for the stack. In other words, it tells the computer where to go next to execute the next command and controls the flow of a program.

Whats an eip?

https://www.imperva.com/learn/application-security/buffer-A buffer overflow (or buffer overrun) occurs when the volume of data exceeds the storage capacity of the memory buffer. As a result, the program attempting to write the data to the buffer overwrites adjacent memory locations