iExploit

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Apply for Membership

Top Posters

Who's Online (0)

Powered by Vanilla. Made with Bootstrap.
Looking to introduce yourself? Look no further, and click here! We also have IRC! [irc.evilzone.org #iexploit]
Writing Simple Buffer Overflow exploits
  • Xin
    Posts: 3,251
    said:


    said:


    said:


    said:


    Just finished writing an exploit for some FTP software, not a private one but it still feels good when that shell spawns :) your tutorial was a good reference for it



    Did you find the vuln or was it already known?


    known unfortunately , i was just practicing some exploitation rather than finding some.

    Ahh I see. Mind sharing the vuln I wanna try ;)

    Btw.... Not pointing fingers but this looks awfully similar to
    http://www.corelan.be:8800/index.php/20 ... overflows/



    Just came across that site and saw that too haha :P , i tried to make my exploit without a tutorial as i'd learn more.
    Xin
  • D4rk357
    Posts: 34
    said:


    said:


    said:


    said:


    Just finished writing an exploit for some FTP software, not a private one but it still feels good when that shell spawns :) your tutorial was a good reference for it



    Did you find the vuln or was it already known?


    known unfortunately , i was just practicing some exploitation rather than finding some.

    Ahh I see. Mind sharing the vuln I wanna try ;)

    Btw.... Not pointing fingers but this looks awfully similar to
    http://www.corelan.be:8800/index.php/20 ... overflows/



    Every Stack based simple buffer overflow will look awfully similar :) .
    Also few key differences

    --->Different Scripting language used
    --->Different Debugger used

    and as far as concept is concerned it will always be the same in this kind of exploit :)
  • chroniccommand
    Posts: 1,389
    said:


    said:


    said:


    said:


    said:


    Just finished writing an exploit for some FTP software, not a private one but it still feels good when that shell spawns :) your tutorial was a good reference for it



    Did you find the vuln or was it already known?


    known unfortunately , i was just practicing some exploitation rather than finding some.

    Ahh I see. Mind sharing the vuln I wanna try ;)

    Btw.... Not pointing fingers but this looks awfully similar to
    http://www.corelan.be:8800/index.php/20 ... overflows/



    Every Stack based simple buffer overflow will look awfully similar :) .
    Also few key differences

    --->Different Scripting language used
    --->Different Debugger used

    and as far as concept is concerned it will always be the same in this kind of exploit :)



    True. Although it's not that hard to change perl to python. And just to add, the guide wasn't explained as well as the guide on the site. I'd add more of an explanation to this.
  • D4rk357
    Posts: 34
    said:


    said:


    said:


    said:


    said:



    Did you find the vuln or was it already known?



    known unfortunately , i was just practicing some exploitation rather than finding some.

    Ahh I see. Mind sharing the vuln I wanna try ;)

    Btw.... Not pointing fingers but this looks awfully similar to
    http://www.corelan.be:8800/index.php/20 ... overflows/



    Every Stack based simple buffer overflow will look awfully similar :) .
    Also few key differences

    --->Different Scripting language used
    --->Different Debugger used

    and as far as concept is concerned it will always be the same in this kind of exploit :)



    True. Although it's not that hard to change perl to python. And just to add, the guide wasn't explained as well as the guide on the site. I'd add more of an explanation to this.



    lol ... you are right ... Its not hard to change perl to python or ruby or something else . What is important is learning the concept and just to make sure i learned it i did it differently .. different debugger and scripting language and yeah oh well writing guide i did it my way and you have every right to love it or hate it or say i skeptical it is not you it was written by somebody else and all :) .Also see tutorial of any concept ..for eg SQLi they all look the same coz the core concept behind a exploitation technique is always the same.. it doesnt change with tutorials :). .....
  • Sh3llc0d3
    Posts: 1,910
    Well I got round to looking deeper into shellcoding tonight. I read through this tutorial and the one on the site (went through the entire tut) and I've gotta say I'm definitely going to buy a book on shellcoding. I still see no need to change from perl to python :P however that's probably due to the amount of coding in perl i've done recently which I love.

    You did the tutorial well as learning this kinda thing without pictures would be a challenge to say the least (in my opinion). I can actually say I've learned a lot tonight so thanks
  • D4rk357
    Posts: 34
    said:


    Well I got round to looking deeper into shellcoding tonight. I read through this tutorial and the one on the site (went through the entire tut) and I've gotta say I'm definitely going to buy a book on shellcoding. I still see no need to change from perl to python :P however that's probably due to the amount of coding in perl i've done recently which I love.

    You did the tutorial well as learning this kinda thing without pictures would be a challenge to say the least (in my opinion). I can actually say I've learned a lot tonight so thanks



    Thanks dude .. :)
  • chroniccommand
    Posts: 1,389
    said:


    Well I got round to looking deeper into shellcoding tonight. I read through this tutorial and the one on the site (went through the entire tut) and I've gotta say I'm definitely going to buy a book on shellcoding. I still see no need to change from perl to python :P however that's probably due to the amount of coding in perl i've done recently which I love.

    You did the tutorial well as learning this kinda thing without pictures would be a challenge to say the least (in my opinion). I can actually say I've learned a lot tonight so thanks


    Hm couldn't you just write a shellcoder in perl or get a shellcode generator? Or, you can read Hacking: The art of exploitation. It has a great section on shellcoding. You know, getting hex values of C programs and using them to create shellcode and such.
  • Xin
    Posts: 3,251
    I think chronic meant its simillar in that isnt it the same vulnerable app
    Xin
  • D4rk357
    Posts: 34
    said:


    I think chronic meant its simillar in that isnt it the same vulnerable app


    No its a different application :)
    [hr]
    And as far as shellcoding is concerned Shellcoders handbook is by far the best shellcoding book i have ever got my hands on :)
  • Bursihido
    Posts: 406
    LOL You should also check this chroniccommand http://in.linkedin.com/in/d4rk357
  • chroniccommand
    Posts: 1,389
    said:


    LOL You should also check this chroniccommand http://in.linkedin.com/in/d4rk357



    Lol so?
  • undead
    Posts: 822
    Nice tutorial. Good work.
  • gizmodo
    Posts: 8
    i like this very nice
  • gringoire
    Posts: 12
    Really good tutorial, was looking for something like that.
    Thank you.
  • McKittrick
    Posts: 194
    i think buffer overflow tuts have now been done to death. i'd like to see more talk about heap overflows (something which doesn't get mentioned enough)
  • Sh3llc0d3
    Posts: 1,910
    said:


    i think buffer overflow tuts have now been done to death. i'd like to see more talk about heap overflows (something which doesn't get mentioned enough)



    I wouldn't attempt to write a BoF or HoF tutorial just based on the fact that there are awesome tutorials around, Peter's one over at corelan is the best series i've seen for completeness.
Add a Comment