architect/skills/binary/buffer-overflow-stack.md

metadata

name: buffer-overflow-stack
domain: binary
triggers:
  languages:
    - c
    - cpp
severity_focus:
  - P1
  - P2
  - P3

buffer-overflow-stack

Classic stack BO: detection patterns (strcpy/gets/sprintf/scanf %s), defences (canary/NX/ASLR/PIE), bypass primitives (info leak → ROP, ret2libc, ret2csu, partial overwrites).

Detection checklist

• enumerate exposure
• match canonical sinks
• confirm reproducibility
• map to CWE / OWASP / CVSS

Exploitation primitives

• reproduce in lab
• minimise the PoC
• assess blast radius

Reporting fingerprint

• include affected version range
• include suggested fix snippet
• include CVSS 3.1 vector