What is an Integer Overflow Vulnerability? | Hacking 101

A quick introduction to how binary integers work, what an integer overflow is, and how they can lead to software vulnerabilities.

[@monicapardeshi]

Marcus' voice is so soothing. 10/10 would take a yoga class with him.

[@redbox360]

Or sleep therapy, don’t misunderstand, content is very good

[@WhatTheWeb]

Great video as always. I just want to note for those that may be new watching that 4,294,967,295 is the maximum for *unsigned* ints(2^32 - 1), but not *signed* ints(2^31 - 1). You'll notice the use of the unsigned keyword in the parameters that are passed. I thought it was also useful to mention that in the beginning we are treating that as an unsigned 8-bit number, so when you say the lowest value for an int is 0, you mean for unsigned ints; regular ints would not overflow to zero but rather INT_MIN. Also, yes, I know Marcus knows this and was just making a nice beginner-friendly tutorial. I'm just stopping by to help out the curious beginner. There's lots more fun and oddities with ints as you progress :p

[@RobertWallhead]

The most crystal clear explanation of overflows I've ever seen. Thanks Marcus, epic stuff.!

[@matthewlandry1352]

Probably the BEST explanation at an atomic level of an integer overflow I have ever seen. Great job Bro.

[@ikehilyard1]

You're the man, Marcus. I was searching for several integer overflow explanations and when I came across this one I stopped to make some popcorn.

[@Treegrower]

I like how you give us an intuitive real world example with the stock market, but also show us a technical example with the code. Awesome video!

[@dxwoo55]

Very good video, straight to the point. Many thanks for sharing!

[@Firefox991gaming]

I'd love to see a video in the future of how this heap overflow can be exploited. This was a great video!

[@uchennagodfrey8343]

Thanks for the explanation Really helpful

[@catboy_official]

Omg I understand! I've never understood this before! Thank you! 😭❤️

[@RandyFortier]

Great explanation! The lack of memory deallocation made me twitch a bit, but that is my issue. :)

[@anonymous6666]

keep up the great videos marcus!

[@banana-9959]

please do more short informative videos like this.

[@codyverdes3289]

THANKS FOR THE VIDEO!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[@cipherbenchmarks]

Really good pratical example at the end. By the way do u still stream on twitch lol

[@deemon710]

You got to just before the point where you explain the hacking part. lol What a tease!

[@internetwarrior666]

Do creating a buffer overflow in an array next!

[@coomer8265]

thanks man !!!

[@itsme7570]

Best cyber security content on KZbin hands down. If you disagree I must not know the channel you speak of so drop below 👇

[@DonMayfield]

Very similar to the date over flow in 1999 to 2000 otherwise known as Y2K programmer problem.

[@NvrSwm]

Interesting that it interprets the 4billion to set the sign bit in the signed int. Anyways nice video, thx!

[@MalwareTechBlog]

In signed integers the highest bit is the sign (1 for negative and 0 for positive), so setting it will flip the value to negative.

[@parthgol]

please make a video on how DLL injections work

[@Danny-SSH]

Well I'd be damned I learned something today. Thanks👍

[@johnsnow1062]

Cool....

[@frogball5819]

greetings to Kevin :)

[@soulsnatched]

aka a systems 2 fever dream

[@kalopseeia1617]

Can you reverse a real virus like wannacry , Step by step ,. or doing a program with have vulnerability like buffer overflow and install to other pc then exploit it over the network ,

[@Crono1020]

A comment in the last The Spiffing Brit video get me here

[@naota3k]

3:13 _very_ not stonks :(

[@Jaapa12]

ok hacking is not for me but nice video

[@hardingbrianna1437]

The tacky dragonfly externally license because art alarmingly spoil beside a receptive height. heavenly heavy hellish, far unshielded

[@JRocLaHey]

so type III civilization would be considered to adapt and operate over 64 and even 128-256 bits os, which type I utilizes at 64 for now, wonder how long for 2048 bits embedded n computing systems or 4096 os🚆