10: Bypassing Stack Canaries (leak + write) - Buffer Overflows - Intro to Binary Exploitation (Pwn)
10th video from the "Practical Buffer Overflow Exploitation" course covering the basics of Binary Exploitation. NX and stack canaries are enabled this time, so we'll use a printf() format string vulnerability leak the stack canary, allowing us to overwrite it with the expected value. We'll use checksec, ghidra, pwndbg and pwntools! Write-ups/tutorials aimed at beginners - Hope you enjoy 🙂 #BinaryExploitation #BufferOverflow #BinExp #RE #Pwn #PwnTools
Find the binary files, source code and scripts to go with the series @ https://github.com/Crypto-Cat/CTF/tree/main/pwn/binary_exploitation_101
↢Social Media↣
Twitter: https://twitter.com/_CryptoCat
GitHub: https://github.com/Crypto-Cat
HackTheBox: https://app.hackthebox.eu/profile/11897
LinkedIn: https://www.linkedin.com/in/cryptocat
Reddit: https://www.reddit.com/user/_CryptoCat23
YouTube: https://www.youtube.com/CryptoCat23
Twitch: https://www.twitch.tv/cryptocat23
↢Binary Exploitation / Reverse Engineering↣
Pwn.College: https://pwn.college
How2Heap: https://github.com/shellphish/how2heap
NightMare: https://guyinatuxedo.github.io
Ir0nstone: https://ir0nstone.gitbook.io/notes/types/stack
PinkDraconian: https://www.youtube.com/playlist?list=PLeSXUd883dhjmKkVXSRgI1nJEZUDzgLf_
More: https://github.com/Crypto-Cat/CTF#readme
↢Resources↣
Ghidra: https://ghidra-sre.org/CheatSheet.html
PwnTools: https://github.com/Gallopsled/pwntools-tutorial
CyberChef: https://gchq.github.io/CyberChef
HackTricks: https://book.hacktricks.xyz/exploiting/linux-exploiting-basic-esp
GTFOBins: https://gtfobins.github.io
Decompile Code: https://www.decompiler.com
Run Code: https://tio.run
↢Chapters↣
Start: 0:00
Basic File Checks: 0:25
Review Source Code: 2:06
Disassemble with Ghidra: 3:05
Outline Attack (Canary Leak + Write): 3:56
Fuzz Printf Format Vuln for Canary: 5:23
Locating Canaries with GDB-PwnDbg: 6:42
PwnTools Exploit Script: 10:37
Additional Pwn/CTF Resources: 12:57
End: 14:38
-
3:04:49
The Dan Bongino Show
2 days agoFlagstock 2024 - Celebrating UNC's Patriots
560K502 -
2:00:05
Nerdrotic
10 hours agoAnunnaki: Mythic Gods or Ancient Astronauts? | Forbidden Frontier #072
57.2K17 -
2:28:26
WeAreChange
9 hours agoAndrew Tate and Jake Shields Drama Exposed!
74K93 -
1:13:39
We Like Shooting
17 hours agoDouble Tap 373 (Gun Podcast)
38.5K4 -
5:31:10
Tundra Gaming Live
9 hours agoThe Worlds Worst Horror Streamer Has Heart Attack Playing Resident Evil Village
47.7K8 -
28:52
PISANITY
10 hours agoI Got Pulled Over on my Motorized Toilet (twice)
43.8K15 -
1:06:12
Patriots With Grit
12 hours agoState Sanctioned Rape: Trans Supremacy In Women's Prisons | Amy Ichikawa
46.3K5 -
1:39:38
2 MIKES LIVE
8 hours ago2 MIKES LIVE #111 Deep Dive Monday!
53.4K2 -
14:37
Chrissy Clark
13 hours agoThe Media Is LYING About What’s Happening In Colorado… I Underreported Stories
63K42 -
1:01:13
The Amber May Show
11 hours agoKamala Harris will Weaponize the Green New Deal Against Americans
48.9K14