The Anatomy of an Exploit
summary
A step-by-step exploit walkthrough shows a vulnerable C program that reads with gets-based vuln and how overwriting a stack buffer changes local variables and return pointers. It uses gdb plus Metasploit’s pattern_create/pattern_offset to find the offset, crafts x86_64 shellcode that does execve("/bin/sh"), fixes null-byte and TTY issues, and demonstrates success in a debug run after disabling mitigations (canaries, NX, ASLR). The exploit works but only after those protections are turned off, highlighting realistic mitigations and ROP alternatives.
AI-written summary · about
chapters (10)
- 0:00Start
- 0:34Patricia Aas - Trainer & Consultant
- 14:44Make: Turn off stack protector
- 16:01Debug Build
- 18:11Let's test the release build
- 20:05Lets try a shorter string
- 22:32Automate the string
- 24:22Use sed to binary patch
- 40:49Look at the assembly of main
- 46:27Compile and test the assembly
related talks
51mThe Anatomy of an Exploit
57mReturn Oriented Programming, an introduction
57mReturn Oriented Programming, an introduction
22mDemostrating Binary Exploitation
01h 06mHow hacking works
55mHow hacking works
01h 00m“Secure Coding Best Practices: Your First Line Is The Last Line Of Defense (1 of 2)”
36mExploiting Buffer Overflows on RISC-V