Module 1.3 (PoC Creation): Creating a stack-based buffer overflow Windows exploit
Channel: Yaksas Security
Date: 2018-12-19

This video is part of the course Hands-on Fuzzing and Exploit Development. In this module, we'll be learning on how to exploit a stack based buffer overflow vulnerability and obtain remote code execution. Expand description for course resources.

CVE Link: https://www.cvedetails.com/cve/CVE-2012-5106/

Videos in this module:

Module 1.1 (Introduction): https://www.youtube.com/watch?v=mMlvBT1sWB4
Module 1.2 (Fuzzing): https://www.youtube.com/watch?v=pn1Cu72jxH0
Module 1.3 (PoC creation): https://www.youtube.com/watch?v=kw9DFPstCAc
Module 1.4 (Controlling the execution): https://www.youtube.com/watch?v=D3rBFnlf5q4
Module 1.5 (Bad character analysis): https://www.youtube.com/watch?v=gRsDKaiGvkI
Module 1.6 (Cracking the shell): https://www.youtube.com/watch?v=3vLtKrBNqLg

Student resources:

Course website: https://learnexploitdevelopment.com
Assignment 1:  https://learnexploitdevelopment.com/HoFED-Files/M1-Assignment.pdf
Module Files: https://learnexploitdevelopment.com/HoFED-Files/HoFED-Module1-Files.zip
Student Support Channel (Discord): https://discord.gg/9nEaWgCNY8
If you prefer to take this course on Teachable: https://courses.yaksas.in/p/hands-on-fuzzing-and-exploit-development

Check out our other cybersecurity courses (use below links to avail 60% discount):

Red Team Adversary Emulation: Mimicking a real-world cyber attack - https://courses.yaksas.in/p/adversary-emulation-101-mimicking-a-real-world-cyber-attack/?coupon_code=YCSCGETSTARTED
Hands-on Fuzzing and Exploit Development (Advanced) - https://courses.yaksas.in/p/hands-on-fuzzing-and-exploit-development-advanced/?coupon_code=YCSCGETSTARTED
FREE COURSE: Immunity Debugger for Exploit Devs - YCSC Lab Essentials - https://courses.yaksas.in/p/immunity-debugger-for-exploit-devs-ycsc-lab-essentials/?coupon_code=YCSCGETSTARTED

#ExploitDevelopment #OSCE #OSED #Windows #OSCP