Gxry

Category: pwn

  • Jump to Environment Variable (x64 Buffer Overflow)

    Intro, Basic Overflow and Offsets During a CTF I was required to exploit a buffer overflow in a binary that elevated it’s privileges to root. The main goal was to utilise this functionality and pop a shell, inheriting the root context that the binary was granted. I won’t go into detail about fuzzing and finding…

  • B2B – Protostar Stack7

    Introduction B2B is a series I have forced upon myself to make sure my basics are covered when it comes to exploitation. After passing my OSCE, I took a little break from exploitation to focus on a few work aspects, but now I am hungry for more lower level nonsense. This series will focus mainly…

  • B2B – Protostar Stack6

    Introduction B2B is a series I have forced upon myself to make sure my basics are covered when it comes to exploitation. After passing my OSCE, I took a little break from exploitation to focus on a few work aspects, but now I am hungry for more lower level nonsense. This series will focus mainly…

  • B2B – Protostar Stack5

    Introduction B2B is a series I have forced upon myself to make sure my basics are covered when it comes to exploitation. After passing my OSCE, I took a little break from exploitation to focus on a few work aspects, but now I am hungry for more lower level nonsense. This series will focus mainly…

  • B2B – Protostar Stack4

    Introduction B2B is a series I have forced upon myself to make sure my basics are covered when it comes to exploitation. After passing my OSCE, I took a little break from exploitation to focus on a few work aspects, but now I am hungry for more lower level nonsense. This series will focus mainly…

  • B2B – Protostar Stack3

    Introduction B2B is a series I have forced upon myself to make sure my basics are covered when it comes to exploitation. After passing my OSCE, I took a little break from exploitation to focus on a few work aspects, but now I am hungry for more lower level nonsense. This series will focus mainly…

  • B2B – Protostar Stack2

    Introduction B2B is a series I have forced upon myself to make sure my basics are covered when it comes to exploitation. After passing my OSCE, I took a little break from exploitation to focus on a few work aspects, but now I am hungry for more lower level nonsense. This series will focus mainly…

  • B2B – Protostar Stack1

    Introduction B2B is a series I have forced upon myself to make sure my basics are covered when it comes to exploitation. After passing my OSCE, I took a little break from exploitation to focus on a few work aspects, but now I am hungry for more lower level nonsense. This series will focus mainly…

  • B2B – Protostar Stack0

    Introduction B2B is a series I have forced upon myself to make sure my basics are covered when it comes to exploitation. After passing my OSCE, I took a little break from exploitation to focus on a few work aspects, but now I am hungry for more lower level nonsense. This series will focus mainly…

  • AnyBurn 4.8 – Buffer Overflow Exploit

    Introduction Note (April 25th): I noticed an updated version of AnyBurn has been released (4.9) which still looks to crash using this same process. The following exploit doesn’t work out the box but will likely be usable with a few tweaks. Within the couple of days before my OSCE exam, Rich (@rd_pentest) sent me a…