Friday, October 27, 2017

Hello World! so let's make another register hacking, something very interresting (on pwn) Exploit Development with AFL, PEDA and PwnTools

We found that we could cause a segmentation fault in the target using some specific inputs. In this post (and in this video), we will cover the next step: confirming if the crash can lead to a vulnerability. To do so, we’ll use GDB, the GNU debugger, and PEDA to analyze the execution of the target while processing the inputs previously generated by AFL. By doing so, we will find a way to hijack the execution flow from the Vuln1 program in order to execute our own code


https://thecyberrecce.net/tag/technology/

No comments: