Blog

Exploit Exercises - Protostar - Heap levels 15 min read

Exploit-Exercises: Protostar For this scenario we need to run the winner() function. To get a better idea about the binary a look at the assembly helps. 0x08048492 <main+6>: sub $0x20,%esp …

Exploit Exercises - Protostar - Network levels 10 min read

Exploit-Exercises: Protostar For this exercise we have got a service listening on port 2999. Let’s connect and see what it does. user@protostar:/opt/protostar/bin$ telnet 127.0.0.1 2999 …

Exploit Exercises - Protostar - Format String levels 7 min read

Exploit-Exercises: Protostar First of all, we take a look at the disassembly. ... 0x08048431 <main+6>: sub $0x10,%esp 0x08048434 <main+9>: mov 0xc(%ebp),%eax ; load pointer to the address …

Exploit Exercises - Protostar - Stack levels 12 min read

Exploit-Exercises: Protostar For this scenario we need to overwrite the stack variable $modified. To get a better idea about the binary a look at the assembly helps. 0x080483f4 <main+0>: push …

Offensive Security Certified Professional 3 min read

I received my OSCP certification via mail. The perfect time to write a short review. Try Harder!

Aviosoft Digital TV Player Professional 1.0 Stack Buffer Overflow 4 min read

Historical Content (2014): This article demonstrates classic stack-based buffer overflow exploitation on Windows XP SP3. Modern Windows systems include mitigations such as ASLR, DEP/NX, and CFG that …

Easy RM to MP3 Converter 3 min read

Historical Content (2014): This article demonstrates classic stack-based buffer overflow exploitation on Windows XP SP3. Modern Windows systems include mitigations such as ASLR, DEP/NX, and CFG that …