Reverse Engineering and Exploit Development

This lecture continues the discussion of stack overflows with a simple program and a Python tester, showing how to craft input, trigger a crash, and determine offset to return address.

Demonstrates format string vulnerabilities by building a Python exploit that writes the shellcode address with format length specifiers, uses a NOP sled, and runs via subprocess to launch calculator.

Explore section overflow vulnerabilities in Windows, demonstrating how buffer overflows can overwrite global variables and function pointers, enabling corruption of strcpy and printf calls through crafted input.

Explore how exploits and reversing apply to macOS, comparing stack and heap memory, overcoming non-executable stack, and addressing format string bugs in C libraries.

Demonstrates how a 32-byte malloc buffer can be overflowed by strcpy, causing heap corruption and a Linux abort, with gdb breakpoints before strcpy and before free revealing heap metadata.

Explore linux heap overflows, showing how overwriting buffers on a 64-bit little-endian system can trigger sig abort and probe protections using two's complement tricks and gdb with python inputs.

Learn to build a simple Python exploit script that crafts a payload with a nop sled and shellcode, then uses a socket to target a vulnerable server.

Learn to convert a script-based exploit into a Metasploit module using Mona in Immunity, generating a Ruby skeleton with TCAP payloads and customizable targets.

Learn how to encode shellcode using msf encode encoders, including Shikata Goodnight and metamorphic block-based options, to bypass intrusion detection systems and prepare encoded payloads.

Explore encoding shellcode workflows, from raw binaries to C files, and learn how polymorphic encoding and tools like Shikata gun shy shape shellcode size and output.