Buffer overflow SLMAIL 5.5 buffer overflow POP3

 Hi evryone !,

In this entry i show how to exploit a mail server slmail 5.5 that is vulnerable to buffer overflow:

The source code:

https://github.com/f0ns1/-Exploiting-BufferOverflow/blob/main/final_exploit_smail_5.5.py

With best regards, f0ns1

Buffer overflow webserver klibri 2.0

 

Hi evryone !,

In this entry i show how to exploit a web server Kolibri 2.0 that is vulnerable to buffer overflow:

    

The source code of the exploit:

https://github.com/f0ns1/-Exploiting-BufferOverflow/blob/main/exploit_kolibri_2_0_webserver.py

With best regards; f0ns1

Basics Buffer overflow

 

Hi everyone!!,

In this entry i explain buffer overflow smashing attack step by step Step by step:

Source code:

#include <string.h>
	#include <stdio.h>
	#
	#void do_something(char *Buffer)
	#{
	# char MyVar[128];
	# strcpy(MyVar, Buffer);
	#}
	#Main program
	#int main(int argc, char **argv)
	#{
	# do_something(argv[1]);
	# printf("Done\n");
	#}

https://github.com/f0ns1/-Exploiting-BufferOverflow/blob/main/basic_overflow.py

With best reagrds, we keep in touch !! f0ns1

Audiotran Buffer overflow [Windows]

 

Hi everyone,

This is a new entry on my personal blog about,  Buffer overflow stack smashing attack:

Video:

Source code:

https://github.com/f0ns1/-Exploiting-BufferOverflow/blob/main/auditran_exploit.py

With best regards,

f0ns1!! we keep in touch

FTP Float Exploiting: [Windows x86] Buffer Overflow [I]

 Hi everyone!,

so far so good,in this post i'm going to explain hot to exploit an RCE over Buffer overflow smash attack type.

The choosen vulnerable software is Float FTP installed over  Windows XP x86 architecture.

The software:

The connection from attacker machine:

Debugger software: Immunity Debugger with mona python plugin

Buffer Overflow exploit Source Code available on my github:

https://github.com/f0ns1/-Exploiting-BufferOverflow/tree/main

Exploit execution:

I promise create a full and deep explaination about how to create the exploit with the following stepts:

- Undesrtand the vulnerability

- Assembler quick introduction: operations/register/stack/heap

- fuzzing

- ciclycal pattern in order to obtain offset

- EIP registry control

- Shell code injection

With best regards!, i hope that you enjoy we keep in touch ;) F0ns1.

  

OSCP_labs [BBSCute] linux [II]

Linux -CuteNews 2.1.2  exploit +  Hping3 (old version) privilege escalation

OSCP_labs [infosecPrep] linux [I]

 

[Linux] easy level: