Testing for Buffer Overflow (OTG-INPVAL-014)

OWASP Testing Guide v3 Table of Contents

This article is part of the OWASP Testing Guide v3. The entire OWASP Testing Guide v3 can be downloaded here.

OWASP at the moment is working at the OWASP Testing Guide v4: you can browse the Guide here

What's buffer overflow?

To find out more about buffer overflow vulnerabilities, please go to Buffer overflow pages.

How to test for buffer overflow vulnerabilities?

Different types of buffer overflow vulnerabilities have different testing methods. Here are the testing methods for the common types of buffer overflow vulnerabilities.

• Testing for heap overflow vulnerability
• Testing for stack overflow vulnerability
• Testing for format string vulnerability