Practical Buffer Overflows for OSCP

Name: Practical Buffer Overflows for OSCP
Rating: 3.9 (90 reviews)

Master the concepts by understanding and then practicing buffer overflows

Last updated 8/2020

English

What you'll learn

5 sections • 26 lectures • 4h 1m total length

Introduction1:40
Lab Setup16:11
Set up your lab by configuring a Windows XP target VM, installing Immunity Debugger and Python tools, and preparing practice software to explore buffer overflow techniques.
x86 Assembly Basics19:17
Immunity Debugger11:21

Python Pattern Generator9:54
Generate a unique, non-repeating pattern for buffer overflow analysis with a Python script, using random characters and user input to define pattern length and search for matches.
Generating Pattern with Metasploit3:08
Determining Available Buffer Size3:47
Introduction to Mona5:14
Finding EIP Offset12:20
Identify the eip offset by generating a unique pattern with Python, sending it via a socket to the target application, and decoding responses to locate the overflow point.
Determining bad characters with Mona12:08
Finding jmp addresses using Mona2:48
Finding jmp addresses using Immunity Debugger2:47
Generating Shellcode using Msfvenom4:19
PWNing the shell !6:12
Introduction to Egghunters6:18
Solving less Buffer sizes using Egghunters7:37
POP POP RET sequence9:44
Short Jumping around6:27

Are you want to learn Buffer Overflows from scratch ?

Are you preparing for OSCP ?

Want to ACE Buffer Overflows in less than hour ?

Then i have made an excellent course for you

Here's glance of what you'll learn

-Understand basics of x86 assembly concepts

-Fuzz the Application using a python framework

-Crash the Application and Observe the stack

-Precision EIP Overwrite with a Unique Pattern

-Finding Bad Characters with Mona

-Finding Jmps with Mona and Immunity Debugger

-Generating Shellcode without Bad characters with METASPLOIT

-Bypass Less Buffer sizes with Egghunters

-POP POP RET technique for bypassing null bytes

-Use short jumps to jump around memory

-Some Important Examples

course bonus : some vulnerable binaries and writeups

also 5 custom made binaries by me + writeups