https://github.com/art049/simple-buffer-overflow-server
Challenge/Tutorial aiming to exploit the buffer overflow vulnerability w/ Metasploit plugin implementation
https://github.com/art049/simple-buffer-overflow-server
buffer-overflow-vulnerability challenge metasploit security tutorial
Last synced: 2 months ago
JSON representation
Challenge/Tutorial aiming to exploit the buffer overflow vulnerability w/ Metasploit plugin implementation
- Host: GitHub
- URL: https://github.com/art049/simple-buffer-overflow-server
- Owner: art049
- License: mit
- Created: 2017-02-06T02:25:54.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2019-10-06T09:24:40.000Z (over 5 years ago)
- Last Synced: 2025-02-03T23:49:14.365Z (4 months ago)
- Topics: buffer-overflow-vulnerability, challenge, metasploit, security, tutorial
- Language: Makefile
- Homepage:
- Size: 8.79 KB
- Stars: 0
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Simple **stack buffer overflow** server
This simple C program (`main.c`) expose a stack injection vulnerablity. This program can also be run as a TCP server using the `make serve_vulnerability` command.
## Goal
The main goal of this challenge is to run arbitrary code (a shellcode f.e) on the server's host machine exploiting the stack buffer overflow vulnerability.
A further goal is to write a Metasploit exploit to automate the vulnerability exploitation.
## Useful ressources
- [Stack buffer overflow (Wikipedia)](https://en.wikipedia.org/wiki/Stack_buffer_overflow)
- [Buffer overflow exploit](https://dhavalkapil.com/blogs/Buffer-Overflow-Exploit/)
- [Classic Buffer overflow exploits on Linux x64](http://www.madhur.co.in/blog/2011/08/04/exploitdevlinux.html)
- [Protections against buffer overflow exploits in Linux](http://www.madhur.co.in/blog/2011/08/06/protbufferoverflow.html)
- [Generating Alphanumeric Shellcode with Metasploit](https://www.offensive-security.com/metasploit-unleashed/alphanumeric-shellcode/)
- [Writing an exploit for Metasploit](https://www.offensive-security.com/metasploit-unleashed/writing-an-exploit/)
### [Solution](./solution/solution.md)