Hands-on Fuzzing and Exploit Development (Advanced)

This video gives an overview of the technique you'll be learning in this module. It also gives a brief overview of tools and software required for this module.

Download Links to the tools mentioned: 

Kali Linux 2018.1: https://www.kali.org/news/kali-linux-2018-1-release/

Immunity Debugger: https://www.immunityinc.com/products/debugger/

Mona Library: https://github.com/corelan/mona

Peach Fuzzer: https://sourceforge.net/projects/peachfuzz/

CoolPlayer+ Portable (target software): https://www.exploit-db.com/apps/3279a02f72b3c5ec5870e7b0b19d2305-CoolPlayer219_Bin.zip

Sublime Text Editor: https://www.sublimetext.com/ 

Virtual Box: https://www.virtualbox.org/wiki/Downloads

VMWare: https://www.vmware.com/in/products/workstation-player/workstation-player-evaluation.html

Notepad++: https://notepad-plus-plus.org/download/v7.6.1.html

Note: Instead of FileFuzz we'll be using Peach Fuzzer in this module

This video gives an overview of fuzzing and then demonstrates how to fuzz an application using Peach fuzzer

In this video, we'll take the results from the previous part and create a  PoC script in Python. The aim is to replicate the crash in the target  application. 

In the video, we identify the bad characters which might break our final payload. 

In this video, we'll enhance the PoC created in the previous part to take control of the execution flow of the application. 

In this video, we'll enhance the PoC created in the previous part to carve out a long jump via Stack Pivoting. 

In this video, we will complete our exploit by integrating the payload  shellcode and finally execute it to obtain shell from the target  machine. 

This video gives an overview of the technique you'll be learning in this module. It also gives a brief overview of tools and software required for this module.

Download Links to the tools mentioned: 

· Kali Linux 2018.1: https://www.kali.org/news/kali-linux-2018-1-release/

· Immunity Debugger: https://www.immunityinc.com/products/debugger/

· Mona Library: https://github.com/corelan/mona

· File Fuzz: https://filefuzz.software.informer.com/2.0/

· Alpha2 Encoder: https://github.com/haxtivitiez/Alpha2-encoder

· Triologic Media Player 8: https://www.exploit-db.com/apps/4e68d370d54180157bf1b578407848f4-triomp8setup.exe

· Sublime Text Editor: https://www.sublimetext.com/

· Virtual Box: https://www.virtualbox.org/wiki/Downloads

· VMWare: https://www.vmware.com/in/products/workstation-player/workstation-player-evaluation.html

· Notepad++: https://notepad-plus-plus.org/download/v7.6.1.html

This video gives an overview of fuzzing and then demonstrates how to fuzz an application using File Fuzz

In this video, we'll take the results from the previous part and create a  PoC script in Python. The aim is to replicate the crash in the target  application. 

In this video, we'll enhance the PoC created in the previous part to take control of the execution flow of the application using SEH overwrite technique

In this video, we'll enhance the PoC created in the previous part to align a CPU register for the final payload shellcode.

In the video, we identify the bad characters which might break our final payload. 

In this video, we will complete our exploit by integrating the payload  shellcode and finally execute it to obtain shell from the target  machine. 

Link to download Alpha2 encoder: https://github.com/haxtivitiez/Alpha2-encoder

This video gives an overview of the technique you'll be learning in this module. It also gives a brief overview of tools and software required for this module.

This video gives an overview of fuzzing and then demonstrates how to fuzz an application using BooFuzz

In this video, we'll take the results from the previous part and create a  PoC script in Python. The aim is to replicate the crash in the target  application. 

In this video, we'll enhance the PoC created in the previous part to take control of the execution flow of the application. 

In the video, we identify the bad characters which might break our final payload. 

In this video, we will enhance our exploit by developing and integrating the first stage payload  shellcode.

In this video, we will complete our exploit by integrating the payload  shellcode and finally execute it to obtain shell from the target  machine. 

This video covers the installation of BooFuzz, fuzzing framework, on Kali Linux 2018.1 and Microsoft Windows 7 SP1 (32-bit)

This video gives an overview of the technique you'll be learning in this module. It also gives a brief overview of tools and software required for this module.

This video gives an overview of exploit development process and fuzzing. It also explains the ZIP file format specification.

In this video we correlate the zip file format specification with the zip file structure used by the target application. This is done by reverse engineering a zip file created by the target application.

In this video we correlate the zip file format specification with the zip file structure used by the target application. This is done by reverse engineering a zip file created by the target application.

In this video we create a fuzzing script in Python, based on our correlation exercise.

In this video we create sample ZIP files using the fuzzing script and fuzz the target application using FileFuzz

In this video, we'll take the results from the previous part and create a  PoC script in Python. The aim is to replicate the crash in the target  application. 

In this video, we'll enhance the PoC created in the previous part to take control of the execution flow of the application. 

In the video, we identify the bad characters which might break our final payload. 

In this video, we add complimentary conditional short jump to the PoC.

In this video we carve out a long jump onto the stack

In this video we generate egg hunter shellcode and start the process of encoding it manually.

In this video, we complete the process of manually encoding the egg hunter shellcode.

In this video, we add the encoded egg hunter to the PoC and give it a test run.

In this video, we generate the payload shellcode, encode it using an encoder and execute it to obtain a shell from the target machine.

This  video gives an overview of the technique you'll be learning in this  module. It also gives a brief overview of tools and software required  for this module.

Download Links to the tools mentioned: 

Kali Linux 2018.1: https://www.kali.org/news/kali-linux-2018-1-release/

Immunity Debugger: https://www.immunityinc.com/products/debugger/

Mona Library: https://github.com/corelan/mona

Axessh 4.2 (target software): https://www.exploit-db.com/apps/12d8cee31a99cdbd7d30ebf5c86c57ca-axessh.exe

Sublime Text Editor: https://www.sublimetext.com/ 

Virtual Box: https://www.virtualbox.org/wiki/Downloads

VMWare: https://www.vmware.com/in/products/workstation-player/workstation-player-evaluation.html

Notepad++: https://notepad-plus-plus.org/download/v7.6.1.html

Python: https://www.python.org/downloads/release/python-2716/

This video gives an overview of fuzzing and then demonstrates how to fuzz input fields in an application.

In this video, we'll take the results from the previous part and create a  PoC script in Python. The aim is to replicate the crash in the target  application. 

In this video, we'll enhance the PoC created in the previous part to take control of the execution flow of the application. 

In the video, we identify the bad characters which might break our final payload. 

In this video, we will enhance our exploit by integrating the stage 1 payload shellcode and execute it to download stage 2 payload.