Category: forensics
Author: canopus
Forensics tough guy huh? Let's see how you do...
Part 5: What is the Stack Canary of the process of PID=1554 in kernel space, not in the TLS (Thread Local Storage) ECSC{0x00aaaa...}
Notice where the null byte is!
Author: canopus