EH-Net

Ethical Hacking Discussions and Related Certifications => OSCP - Offensive Security Certified Professional => Topic started by: skk on July 03, 2012, 01:31:12 AM

Title: Buffer Overflow
Post by: skk on July 03, 2012, 01:31:12 AM

HI Guys,

I am preparing for OSCP, i am new to buffer overflow, can someone point out a good ref material on this topic for beginners

Title: Re: Buffer Overflow
Post by: MaXe on July 03, 2012, 07:11:43 AM

Corelan tutorials and of course the PWB course you are doing.
(Link: http://corelan.be/index.php/category/security/exploit-writing-tutorials/ )

Title: Re: Buffer Overflow
Post by: skk on July 03, 2012, 07:43:27 AM

yup , i am repeating the videos several times and slowly getting the hang of things now. Thanks for the response.

I will also check the link you mentioned.

Title: Re: Buffer Overflow
Post by: dbest on July 07, 2012, 12:04:06 AM

@skk - even I struggled with the buffer overflow material of OSCP and wasted most of my lab time.

I finally managed to figure it out when I tested it in my own lab and got a shell on the victim machine. Hence my suggestion, move on with the rest of the course and do not waste your lab time on buffer overflow exploitation. Once your lab time is up, you can focus on testing it locally.

Title: Re: Buffer Overflow
Post by: cd1zz on July 07, 2012, 12:34:55 PM

After you get a feel for how a basic stack overflow works, go to exploit-db and recreate as many exploits as possible. Meaning, down load the vulnerable software, try to find the bug your self and recreate the exploit. It's the best practice you can get.

I also highly recommend downloading "Freefloat FTP Server" there are a hundred buffer overflows in it and its a fantastic way to practice.