Question 6
What is the correct sequence of steps that an attacker would do to inject a payload into the stack using buffer overflow vulnerabilty?
(i) Put machine code in string larger than the buffer
(ii) Get machine codes of payload
(iii) Find buffer overflow vulnerability in an application
(iv) Copy large string into buffer
(i) → (ii) → (iii) → (iv)
(i) → (iii) → (iv) → (ii)
(ii) → (i) → (iv) → (iii)
(ii) → (iii) → (i) → (iv)