Format string kungfu via GOT table overwrite
Loading...
Loading...
1,248
Uploaded by khermans on Nov 29, 2007
This C source code has a few bugs, but only one method provides easy exploitation on Linux. The exploit overwrites a Global Offset Table entry for a networking socket call by abusing printf. Our payload has been injected in a specially crafted form in order to execute properly due to manipulation of the data. The payload executes the 'id' command in the context of the running server. Shellcode size restrictions were a factor, because your data gets overwritten with zeros. It takes some hacking kungfu...watch and learn :-)
Problem Source Code:
http://pastebin.com/vGGPZgSq
Solution Source Code:
http://pastebin.com/1cDUSRng
Link to this comment:
Share to:
Uploader Comments (khermans)
Loading...
- 8:32[NDH2010] level 8 : format stringby raisepwn809 views
- 5:14Hacking shellcode into static filesby partyatmine38659 views
- 3:15Generating Shellcode using Metasploitby SecSavvy1,746 views
- 2:10Format String Bug and Code Injectionby bin00pang937 views
- 2:09MSN remote Format string exploit - latest versi...by pohead1231,541 views
- 6:36How to use debugger in linux by using gdb functionby rattisuk1,930 views
- 1:56OpenChange - mapiprofile screencastby jkerihuel1,115 views
- 3:09St. Anthony / Tech Connect help homeless in San...by khermans1,805 views
- 0:54ICQ6 User crashen (Format String Vulnerability)by mig29amigo2,269 views
- 2:11C# String.Format - Shalvinby shalvinpd2,296 views
- 1:42Linux Kernel Xploitby dmindebian2,214 views
- 3:14Analyzing a Malicious PDF Fileby dist679,748 views
- 2:02Shellcode example for Win XP SP2by memo17013,577 views
- 36:31Gynvael's Shadow #4: Format Stringby GynvaelColdwind658 views
- 1:56Sultan Stringsby sonokinetic5,409 views
- 9:57Exploiting Software Vulnerabilities - A case studyby skilltutos14,257 views
- 9:52Windows Shellcode by Xnuxer Researchby xShadyx93744 views
- 9:56Socket Programming Lecture (using C/Java) 1by simplysourabh19,714 views
- 7:43Python 3 Tutorial: 18 - Formattingby TheMonkeyLords2,485 views
This was my solution to the CEPT final hands-on exam back in 2007. I don't think they use this example any longer so it should be OK to share my solution publicly.
khermans 1 year ago
that is bull shit...
cause: anybody can see anything...
LagartoNET303030 1 year ago
@LagartoNET303030 Use HD mode!
khermans 1 year ago
foo?
khermans 3 years ago