8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

1/20

http://oldversion.com/http://oldapps.com/http://www.corelan.be:8800/wp-content/uploads/2009/07/image4.pnghttp://www.corelan.be/?dl_id=37http://www.corelan.be:8800/index.php/forum/writing-exploits/http://www.milw0rm.com/exploits/9186http://packetstormsecurity.org/0907-exploits/http://www.rm-to-mp3.net/download.htmlhttp://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/http://www.corelan.be/

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

2/20

http://undocumented.ntinternals.net/UserMode/Undocumented%20Functions/NT%20Objects/Process/PEB.htmlhttp://en.wikipedia.org/wiki/Flat_memory_modelhttp://en.wikipedia.org/wiki/X86_assembly_language

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

3/20

http://en.wikipedia.org/wiki/Stack-based_memory_allocationhttp://www.corelan.be:8800/wp-content/uploads/2010/08/image3.png

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

4/20

http://www.corelan.be:8800/wp-content/uploads/2010/09/image26.pnghttp://www.corelan.be:8800/wp-content/uploads/2010/09/image19.png

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

5/20

http://c/Users/peter.vaneeckhoutte/AppData/Local/Temp/WindowsLiveWriter1286139640/supfilesEC16FD/image10.pnghttp://www.corelan.be:8800/wp-content/uploads/2010/09/image20.pnghttp://www.corelan.be:8800/wp-content/uploads/2010/09/image28.pnghttp://www.corelan.be:8800/wp-content/uploads/2010/09/image27.png

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

6/20

http://www.corelan.be:8800/wp-content/uploads/2010/09/image22.png

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

7/20

http://www.corelan.be:8800/wp-content/uploads/2010/09/image23.png

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

8/20

http://www.immunityinc.com/products-immdbg.shtmlhttp://www.ollydbg.de/http://www.microsoft.com/whdc/devtools/debugging/default.mspxhttp://en.wikipedia.org/wiki/Stack_overflowhttp://en.wikipedia.org/wiki/Stack_buffer_overflowhttp://www.corelan.be:8800/wp-content/uploads/2010/09/image25.pnghttp://www.corelan.be:8800/wp-content/uploads/2010/09/image24.png

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

9/20

http://debugger.immunityinc.com/register.htmlhttp://www.corelan.be:8800/wp-content/uploads/2009/07/image7.pnghttp://www.corelan.be:8800/wp-content/uploads/2009/07/image6.pnghttp://www.corelan.be:8800/wp-content/uploads/2009/07/image5.png

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

10/20

http://www.corelan.be:8800/wp-content/uploads/2010/08/image11.pnghttp://www.corelan.be:8800/wp-content/uploads/2009/07/image50.png

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

11/20

http://www.corelan.be:8800/wp-content/uploads/2009/07/image58.png

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

12/20

http://www.corelan.be:8800/wp-content/uploads/2009/07/image70.pnghttp://www.corelan.be:8800/wp-content/uploads/2009/08/image3.png

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

13/20

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

14/20

http://www.corelan.be:8800/wp-content/uploads/2009/07/image17.png

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

15/20

http://www.corelan.be:8800/wp-content/uploads/2009/07/image18.png

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

16/20

http://code.google.com/p/w32-seh-omelet-shellcode/http://code.google.com/p/w32-seh-omelet-shellcode/http://packetstormsecurity.org/shellcode/23bytes-shellcode.txthttp://www.metasploit.org/users/opcode/msfopcode.cgihttp://www.securiteam.com/tools/5LP0C1PEUY.html

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

17/20

http://www.corelan.be:8800/wp-content/uploads/2009/07/image14.png

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

18/20

http://www.corelan.be:8800/wp-content/uploads/2009/07/image15.png

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

19/20

http://www.digiprove.com/show_certificate.aspx?id=P67904%26guid=YseoqlxE4Em0XQkN27jdhwhttp://www.digiprove.com/show_certificate.aspx?id=P67904%26guid=YseoqlxE4Em0XQkN27jdhwhttp://0.0.0.0/http://www.corelan.be:8800/wp-content/uploads/2009/07/image16.png

8/7/2019 Exploiting 1-Stack Based Overflows (by corelanc0d3r)

20/20