bretley/how2exploit_binary

An in depth tutorial on how to do binary exploitation

how2exploit_binary's Issues

People who are experienced with binexp: What more challenges should I add?

I intend to add challenges in the following areas:

Heap (pretty vague, but heap exploitation is an art form of its own)

syscalls/more ROP

Edge cases (SSP vulnerabilities, "magic shell",etc)

Any Ideas? I want to grow this repo

dump_stack.h

In intro 2 you are including dump_stack.h, but
on my debian it cannot be found. From where is
this header? I was looking on net and found nothing.

Correctly Order Folders?

Currently, they're alphabetically organized which puts the "exercise" folders before the "intro" folders.

Does it make sense to add numbers before the folders so it looks like this?

1. intro-1
2. intro-2
3. intro-3
4. exercise-1
...

Edit: just realized I had only ever worked with the directories in my terminal and there is an index with them. nvm

Intro to Pwntools 404

Looks like your files for the intro to pwntools section were never uploaded!
Besides that this tutorial is great. Thanks

Change repo description to...

"In depth binary exploitation tutorial"

Incorrect address encoding in example

In excercise-3.5/README.md, you've got this example encoding.

say for example the address of write() in a binary is 0xdeadbeef
\xef\xbe\xed\xda

Wouldn't that be encoded like this?

\xef\xbe\xad\xde

(I'll open a large PR soon, this fix will be in there.)

Add links to VM installation tutorials for Mac and Windows in README

VirtualBox for Macs

Ubuntu can be installed within Windows10

zsh : exec format error: ./overflow2

both the intro-2 and exercise-1 with the overflow file. i cant run it on linux

Why is pwntools installed 3 times in this script?

how2exploit_binary/install.sh

Line 17 in de5e5f6

pip install pwntools;

Why do these files exist?

• exercise-3/peda-session-date.txt
• exercise-3/peda-session-overflow.txt