Collaborate Disseminate
I wrote an exploit for the exercise final0 of the protostar VM.
But I am a little bit confused about the order of the shellcode, padding, nops and return address.
When I use the following code (python) to exploit the final0… Continue reading Protostar final0 shellcode exploit and padding order
Say you’re fuzzing a Windows x32 application for a file format bug and, say, you found a pattern that causes the application to crash.
My normal steps are:
load application into a debugger
generate and investigate the cr… Continue reading Understanding a crash
I’m writing a Win32 buffer overflow exploit. One of the challenges I’m facing is the fact that I need to call recv() API to receive more data from the network in order to store this data into the stack then jump to it and exe… Continue reading a shellcode to call socket recv() API and receive more data to execute it
I know that upon overflow, the stack is overwritten, but I do not understand why do registers are changed, such as EIP / RIP.
How come some registers are modified upon overflow ?
Continue reading Why do registers registers get overwritten upon overflow?
I’m trying to play around ret2libc but I’m getting an output i can’t understand. Here is the program I’m trying to exploit :
#include <stdlib.h>
#include <stdio.h>
#include <string.h>
/* gcc -m32 -fno-stac… Continue reading Troubles with my ret2libc experiences
Some changes are underway at Stack Overflow, the online community where some 50 million developers and others converge to talk programming and many other things. TechCrunch has learned and confirmed that the startup has conducted a substantial number of layoffs across the company as it looks to steer the business more towards its core Q&A products and away from areas that were seeing… Read More Continue reading Developer community Stack Overflow lays off reportedly 20% of staff as it refocusses business
Security researchers have discovered not one or two, but a total of seven security vulnerabilities in the popular open source Dnsmasq network services software, three of which could allow remote code execution on a vulnerable system and hijack it.
Dns… Continue reading Google Finds 7 Security Flaws in Widely Used Dnsmasq Network Software
I’m practicing in exploit development and one of the scenario i have most difficulties is stack pivoting besides the “ADD ESP, XXX” or something like that. The question is, during the writing of a ROP chain, when you don’t ha… Continue reading Stackpivoting techniques
I’m practicing exploit development and one of the scenario I am haing most difficulties with is stack pivoting besides the “ADD ESP, XXX” or something like that.
The question is, during the writing of a ROP chain, when you d… Continue reading Stackpivoting techniques
I am attempting to practice some return-to-libc exercise found here but I’m stumped.
According to the exercise, I am suppose to be able to obtain a shell by arranging my input as follows:
|——————————-|-… Continue reading Unable to system("/bin/sh") in return to libc practice