Demostrating Binary Exploitation
summary
Demonstrates a recent one‑year‑old heap overflow in Sudo by walking through vulnerable C snippets, showing how overflowing a 16‑byte buffer overwrites age, flags and the return address, and then running a live exploit to escalate privileges. Shows compilation and testing details, notably compiled with -fno-stack-protector to make the bug visible, compares allocators like glibc malloc vs scudo and explains detection and prevention techniques; live demo succeeds after adjusting the payload, with segfaults used to iterate.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 0:46Introducing Christian Resell
- 4:22Stack and Heap
- 5:11Pwn
- 6:08Memory Safety
- 8:31Buying Expectations
- 10:45Relevance
- 11:09Stack Overflow
- 11:39Code
related talks
01h 00mDemonstrating Binary Exploitation
58mDemonstrating binary exploitation
51mThe Anatomy of an Exploit
01h 00m“Secure Coding Best Practices: Your First Line Is The Last Line Of Defense (1 of 2)”
57mThe Anatomy of an Exploit
36mExploiting Buffer Overflows on RISC-V
55mHow hacking works
37mHouse of Einherjar — Yet Another Heap Exploitation Technique on GLIBC