Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Top Posters

Who's Online (2)

Powered by Vanilla. Made with Bootstrap.
Exploit Series - Part 3
  • m0rph
    Posts: 332
    http://www.youtube.com/watch?v=v3wOMXZykrE


    What's in this video?
    -We cover the basics of fuzzing
    -Very little slides (yay!)
    -POWER RANGER MUSIC! GRRR!!!!
    -We write a very simple/basic template for a python fuzzer
    -How to tell if a fuzz test was successful

    What's in the next video?
    -Cover the basics of debugging/stack execution
    -Differentiating functions from other stack procedures
    -Finding those functions, then disassembling them
    -Finding return addresses

    Questions? Comments?

    Code for TCP Echo Server used in video:

    /* Sample TCP server */

    #include <sys/socket.h>
    #include <netinet/in.h>
    #include <stdio.h>

    int main(int argc, char**argv)
    {
    int listenfd,connfd,n;
    struct sockaddr_in servaddr,cliaddr;
    socklen_t clilen;
    pid_t childpid;
    char mesg[256];

    listenfd=socket(AF_INET,SOCK_STREAM,0);

    bzero(&servaddr,sizeof(servaddr));
    servaddr.sin_family = AF_INET;
    servaddr.sin_addr.s_addr=htonl(INADDR_ANY);
    servaddr.sin_port=htons(7777);
    bind(listenfd,(struct sockaddr *)&servaddr,sizeof(servaddr));

    listen(listenfd,1024);

    for(;;)
    {
    clilen=sizeof(cliaddr);
    connfd = accept(listenfd,(struct sockaddr *)&cliaddr,&clilen);

    if ((childpid = fork()) == 0)
    {
    close (listenfd);

    for(;;)
    {
    n = recvfrom(connfd,mesg,1000,0,(struct sockaddr *)&cliaddr,&clilen);
    sendto(connfd,mesg,n,0,(struct sockaddr *)&cliaddr,sizeof(cliaddr));
    printf(\"-------------------------------------------------------\n\");
    mesg[n] = 0;
    printf(\"Received the following:\n\");
    printf(\"%s\", mesg);
    printf(\"-------------------------------------------------------\n\");
    }

    }
    close(connfd);
    &main;
    }
    }


    Cheers fella's! I'm off to starbucks! :D

    Download here:

    http://www.megaupload.com/?d=08HMGW3D


    *Edited code for server program to reduce random ascii values being printed when input is received.
    while( !(succeed = try() ) );
  • Sh3llc0d3
    Posts: 1,910
    said:


    Fuzzing is something that isn't frequently explained to noobs (except in books), it's good that you are helping them out through this video series.



    Agree completely, fuzzing is hardly ever covered for noobs, i've not checked this out yet but I'm glad it's getting covered here :)
  • Xin
    Posts: 3,251
    Keep up this series its great
    Xin