The Ethical Hacker Network - Buffer Overflow

Latest Additions

Who's Online

EH-Net > Ethical Hacking Discussions and Related Certifications > Network Pen Testing > OSCP - Offensive Security Certified Professional (Moderator: don) > Buffer Overflow

Pages: [1] Go Down

« previous next »

	Author	Topic: Buffer Overflow (Read 2832 times)
0 Members and 1 Guest are viewing this topic.

skk

Newbie

Offline

Posts: 2

Buffer Overflow

« on: July 03, 2012, 01:31:12 AM »

HI Guys,

I am preparing for OSCP, i am new to buffer overflow, can someone point out a good ref material on this topic for beginners


	Logged

MaXe

Hero Member

Offline

Posts: 669

I've just upgraded myself to a cyborg muahahaa!!1

Re: Buffer Overflow

« Reply #1 on: July 03, 2012, 07:11:43 AM »

Corelan tutorials and of course the PWB course you are doing.
(Link: http://corelan.be/index.php/category/security/exploit-writing-tutorials/ )


	Logged

I'm an InterN0T'er

skk

Newbie

Offline

Posts: 2

Re: Buffer Overflow

« Reply #2 on: July 03, 2012, 07:43:27 AM »

yup , i am repeating the videos several times and slowly getting the hang of things now. Thanks for the response.

I will also check the link you mentioned.


	Logged

dbest

Jr. Member

Offline

Posts: 79

Re: Buffer Overflow

« Reply #3 on: July 07, 2012, 12:04:06 AM »

@skk - even I struggled with the buffer overflow material of OSCP and wasted most of my lab time.

I finally managed to figure it out when I tested it in my own lab and got a shell on the victim machine. Hence my suggestion, move on with the rest of the course and do not waste your lab time on buffer overflow exploitation. Once your lab time is up, you can focus on testing it locally.


	Logged

CISM, CEH, CISA, ISO 27001 LA

cd1zz

Hero Member

Offline

Posts: 561

Re: Buffer Overflow

« Reply #4 on: July 07, 2012, 12:34:55 PM »

After you get a feel for how a basic stack overflow works, go to exploit-db and recreate as many exploits as possible. Meaning, down load the vulnerable software, try to find the bug your self and recreate the exploit. It's the best practice you can get.

I also highly recommend downloading "Freefloat FTP Server" there are a hundred buffer overflows in it and its a fantastic way to practice.