My first buffer overflow exploit: pretty easy
1–10 of 12 posts
Re: My first buffer overflow exploit: pretty easy
#2If this kind of stuff interests you, then you should really check out Phrack Magazine [1] (although not very active anymore). There was an amazing article from '96 entitled "Smashing The Stack For Fun And Profit" [2], which gives a great overview of how this all works.
[2] http://www.phrack.com/issues.html?issue=49&id=14#article
Re: My first buffer overflow exploit: pretty easy
#3Another thing to start with would be unsupported software like Office XP or Win2000, most of which was created before the GS cookie even existed.
Re: My first buffer overflow exploit: pretty easy
#4If this kind of stuff interests you, then you should really check out Phrack Magazine [1] (although not very active anymore). There was an amazing article from '96 entitled "Smashing The Stack For Fun And Profit" [2], which gives a great overview of how this all works. [1] http://www.phrack.com [2] http://www.phrack.com/issues.html?issue=49&id=14#article
This is a legendary article that brought these vulnerabilities to the spotlight, but it's somewhat outdated by now.
You can read it for the cult value and as a general reference to have, but for someone really looking to get into it, I'd recommend Corelan's exploit tutorials, Open Security Training's courses and The Legend of Random's articles on reverse engineering.
Re: My first buffer overflow exploit: pretty easy
#5You might enjoy one of my favourite time wasting websites of all time (Windows kind of required at times though but in the age of VMs that's a nonissue). The +XXX folks were basically my reversing education, makes me wonder if the identity of +orc was ever figured out :)
I really liked the hash-maze, cool idea.
Re: My first buffer overflow exploit: pretty easy
#6If you're into this type of stuff check out Smash the stack[1] It has a bunch of memory type vulnerability wargames (specifically the IO level) for your choosing. They start off basic, like the one you presented in the blog, then more advanced topics like heap overflows, return 2 libc, SEH overwrites, GOT overwrites, ROP techniques etc.
like WestCoastJustin pointed out phrack has phenomenal articles but require you to have a fairly strong understanding of C and Operating system type things.
Re: My first buffer overflow exploit: pretty easy
#7If this kind of stuff interests you, then you should really check out Phrack Magazine [1] (although not very active anymore). There was an amazing article from '96 entitled "Smashing The Stack For Fun And Profit" [2], which gives a great overview of how this all works. [1] http://www.phrack.com [2] http://www.phrack.com/issues.html?issue=49&id=14#article
This is a legendary article that brought these vulnerabilities to the spotlight, but it's somewhat outdated by now. You can read it for the cult value and as a general reference to have, but for someone really looking to get into it, I'd recommend Corelan's exploit tutorials, Open Security Training's courses and The Legend of Random's articles on reverse engineering.
Thanks for the recommend reading, and for anyone else looking at this thread, here are the links:
Corelan's exploit tutorials @ https://www.corelan.be/index.php/2009/07/19/exploit-writing-...
Open Security Training @ http://opensecuritytraining.info/
The Legend of Random @ http://www.thelegendofrandom.com/blog/
Re: My first buffer overflow exploit: pretty easy
#8If this kind of stuff interests you, then you should really check out Phrack Magazine [1] (although not very active anymore). There was an amazing article from '96 entitled "Smashing The Stack For Fun And Profit" [2], which gives a great overview of how this all works. [1] http://www.phrack.com [2] http://www.phrack.com/issues.html?issue=49&id=14#article
they still use this phrack article in universities, it's in the lecture slides for 6.857 MIT Computer & Networks Security. http://courses.csail.mit.edu/6.857/2013/files/smash-the-stac...
Re: My first buffer overflow exploit: pretty easy
#9I highly suggest doing the labs of MIT's 6.858 (Computer System Security). I'm taking it right now, and it's one of the most rewarding classes. The labs can be found here: http://css.csail.mit.edu/6.858/2013/schedule.html. In fact, the first lab is all about buffer overflows and return to libc attacks. All labs come with autocheckers or sufficient instructions to check your answers. The first lab can be found here: http://css.csail.mit.edu/6.858/2013/labs/lab1.html. Highly highly recommended to anyone. I wish more people knew about this class because it's class A, absolutely awesome. Very practical and informative.
Re: My first buffer overflow exploit: pretty easy
#10I have some equally simple, but networked examples here:
https://github.com/moloch--/Exploit-Demos