Fuzzing in Backtrack 5 R1- Part 3

Fuzzing is a process of sending deliberately malformed data to a program in order to generate failures, or errors in the application. When performed by those in the software exploitation community, fuzzing usually focuses on discovery of bugs that can be exploited to allow an attacker to run their own code, and along with binary and source code analysis fuzzing is one of the primary ways in which exploitable software bugs are discovered.

There are a number of popular and free software based fuzzers available, but during this article we will focus on one of the first fuzzers to become popular within the Information Security community -- SPIKE.

In this part.. i have used pearl to exploit the victim... and used metasploit to investigate the cause of the crash... using the offset finder.. and other cool tools..

Test done on Backtrack 5 R1 and Windows XP SP3.

Music-
Cradle of Filth - Nymphétamine

Video by ChriAdlr.. enjoy

Category:

Education

Tags:

• Part 3
• fuzzing
• fuzz
• hacking
• backtrack
• r1
• metasploit
• scanning
• offset
• finder
• spike
• perl
• coding
• exploit
• attack
• victim
• vulnerabilities
• chriadlr

[ClapikaKuruta]

Spike can also used to other server like ftp or mail? In this video at 4:54 u type ./pattern_offset.rb 0x386f4337 5000. value of " 0x386f4337" is from where?

[pratiksrc]

@ClapikaKuruta u can use a software called OllyDbg... to find the eip.... :)

[mezozam]

in regards of finding the $eip from immunity debugger is that right?

because i have seen many videos and just want to make sure

Thanks for the video anyways

[pratiksrc]

@mezozam oh wait.. for $eip i used metasploit in victims computer.. i used msfpescan...u can use ollydbg to overwrite eip files..

[ClapikaKuruta]

@pratiksrc ok thx,by the way .spk file is what language?have any tutorial on it? i want to try own my ftp server that have login.

[PussayPatroI]

@sagetajr Set it up to work

[sagetajr]

how did you get your internet to work in bt5 while using virtual machine?

[SevenPoint83hertz]

really pro dude, i love your vids