Introduction to Use-After-Free Vulnerabilities | UserAfterFree Challenge Walkthrough (Part: 1)

[@farahm.4455]

Don’t understand a single thing. Just here to sleep. Soothing & calming voice

[@sharathkumark9692]

😂😂

[@itsme7570]

This guy is a cyber security GOD. You are not worthy of using his sweet soothing to fall asleep! You must try and understand and fall asleep on accident like the rest of us!

[@itsmmdoha]

It's clear, I'm subscribing I mean, he is Hutchins himself! plus the explanation is great. love this guy.

[@timjohansson4304]

Excellent!! Love the image of the heap structure made it very easy to understand. Looking forward to the next vid :) cheers!

[@Fyra44]

I was just reading about this yesterday! Nice to see it in action. Thanks!

[@RazviOverflow]

This is indeed top-notch content! Thank you!

[@sechvnnull1524]

This is super clear and easy to follow. I have visual basic and python experience but the only work I've done in C and C++ is hello world and I can follow along. Amazing job! I'm so excited to start practicing and learning what you are teaching. I just finished competing in the NCL and they have multiple reverse engineering challenges. This as well as the rest of your videos is going to prepare me for next season!! And for a job one day when I finish school. Thank you.

[@SubitusNex]

Awesome vid. You made this so clear. Legit good job.

[@kalopseeia1617]

Awesome , Daily dose of MalwareTech. More vids , Like this thank you. Free Study.

[@inthehouse7598]

Awesome explanation! Please do part 2 explaining about function pointer

[@heeerrresjonny]

These kinds of vulnerabilities are why I prefer memory-managed languages lol. It's crazy to me that we've gone so long with so much software written in languages where it is this easy to litter vulnerabilities everywhere. I'm hoping more things get re-written in Rust (or another similarly safe-by-default language) soon.

[@werren894]

this is totally PROGRAMMER vulnerability, not the PROGRAMMING LANGUAGE vulnerability, the reason for that is because C has a use case of why it's invented (including all the low-level lang such as ASM and shit), it's not swiss army knife but depending on the programmer, for example, the existence of interpreted lang and rust written in C, why? because the person who made that doesn't have the programming vulnerability that most C programmer does, it's fallacy(Idk if this is intended or not) to make programmers avoid C because it makes them more vulnerable in low-level stuff logic, to make sure the hacking culture keeps going so it would be hard to find a low-level programmer for defense security perspective, imagine if you have to write C for certain comp-arc or some different design or business/external reason like some rover for mars exploration written in C for a reason because it's green language/lightweight.

[@heeerrresjonny]

@@werren894 No, in modern software engineering, choosing any language that is not safe by default is a design flaw. Humans make mistakes and we need all the help we can get to avoid creating problems. Very occasionally there may be specific functions that need to use "unsafe" constructs, but there is support for that in Rust etc... There is absolutely no good reason to write new code in C or C++ outside of very, very specific cases. It is lazy and irresponsible.

[@werren894]

@@heeerrresjonny choosing not safe lang by default is not design flaw it's use case flaw, last year, I worked with some STM8L MCUs, which are 8-bit microcontrollers manufactured by ST. The only language you can use with those MCUs is C. I kind of had no choice. But even if Rust/C++ can work on those MCUs, I won’t use it. Because the kind of program you want to run on a 8-bit MCU almost certainly doesn’t need dynamic memory allocation. C *is not* C++, rust were made to replace C++ not C as "kitchen sink" language (languages solve problems by adding more language features) because C++ as superset of C is flawed, Go is the result of C programmers designing a new programming language for actually modern not green things like cloud (made by plan9 alumni), and Rust is the result of C++ programmers designing a new programming language pretty much to replace it (because that is the use case from mozilla), writing C is not design flaw unless we talked about quantum computer and trust me not all C bug is often shows in the internet and ppl pretty much already know how to write safe C lang with common bug, rust app can be exploited too by using the unsafe block and if they get rid of it's feature rust pretty much become python. From my (admittedly limited) perspective, Rust is more of language for writing high performance applications like C++. C is almost like DSL for hardware programming. When you’re writing device drivers, you want to know what kind of machine code is going to be produced. C gives you just enough abstraction that it’s nicer than using assembly directly, but you still basically know what kind of machine code you’re going to get. This is why C is often called “portable assemble", and also there is a lot of microcontroller you can't write with rust or even c++ because the lang is not portable enough. When I did some low-level programming in Rust I felt like I was spending more time on how to use refrences(not learning, just integrating them in the project) then the project itself. rust is tool to reduce programmers fault since it's feature already exist in most language, and also there is existence of vlang that promise to replace C, rust and golang with unsafe feature at the same time but still in development, i think c is still useful unless we move to quantum computing and different civilization.

[@000maestro000]

very nice video, very informative, looking forward to seeing this exploited on windows 10

[@000maestro000]

any chance you can make a video about the method you use capture and diff windows updates ?

[@cece-yd3bo]

When looking for a vuln in a software, are you looking for a precise vuln or you look for every vuln you can stumble across?

[@zerogclub]

Really good work and explanation!

[@fathert]

Fantastic explanation, thank you!

[@ladameenviolet6167]

The rar file not found @malwaretechblog. Kindly re-upload please. Thanks

[@emiryaasir]

You have a new Subsciber. Marcus.

[@philippejean1102]

Wow that's an epic video man 👌 !!

[@abhinavpraveen7551]

Can you please upload a video about botnets

[@fromhu9857]

Is there a way to contact you?

[@NIKHIL-yl1ws]

Please let me how many programming languages do we need become a cyber security expert????

[@0xbitbybit]

Expert? All of them.

[@cherryCake299]

what code editor he using ?

[@v380riMz]

Visual Studio

[@khafi4972]

wow. what a genius

[@internetwarrior666]

Do one on living with ADHD now. 😶

[@emmanuelnjeru8425]

Lit!

[@jakubsebek]

Good stuff.

[@Nothinglike654]

Please help sir .. please help .. my laptop attack by ransomeware virus and my all data encrypted

[@C4T0P1A]

epiccc

[@mathiasensimon]

Nice man! :)

[@utensilapparatus8692]

thx bruh

[@mohammadturk806]

❤

[@Oscar-bd5cp]

hi bro

[@andrewh619]

bad

[@longcat666]

thanks for share the knowledge, btw in the rar file I didn't find the ChatClient.py & CheckFlag.py

[@MalwareTechBlog]

My bad, reuploaded it

[@longcat666]

@@MalwareTechBlog thank you