Module 2.5 (Bad character analysis): Using SEH Overwrite to exploit Windows software
Channel: Yaksas Security
Date: 2019-01-09

This video is part of the course Hands-on Fuzzing and Exploit Development. In this module, we'll be learning on how to exploit a SEH overwrite buffer overflow vulnerability and obtain remote code execution. Expand description for course resources. 

Videos in this module:

Module 2.1 (Introduction): https://www.youtube.com/watch?v=TfcPvs1VzAE
Module 2.2 (Fuzzing): https://www.youtube.com/watch?v=OsZ5pyhZU3U
Module 2.3 (PoC creation): https://www.youtube.com/watch?v=msfQGwMg9cA
Module 2.4 (Controlling the execution): https://www.youtube.com/watch?v=GoBn7L9iFDQ
Module 2.5 (Bad character analysis): https://www.youtube.com/watch?v=Sf9pf_bwkUE
Module 2.6 (Cracking the shell): https://www.youtube.com/watch?v=TVVtB6SdO8I
Assignment 2:  https://learnexploitdevelopment.com/HoFED-Files/M2-Assignment2.pdf

Student resources:

Course website: https://learnexploitdevelopment.com
Assignment 2:  https://learnexploitdevelopment.com/HoFED-Files/M2-Assignment2.pdf
Module Files: https://learnexploitdevelopment.com/HoFED-Files/HoFED-Module2-Files.zip
Student Support Channel (Discord): https://discord.gg/9nEaWgCNY8
If you prefer to take this course on Teachable: https://courses.yaksas.in/p/hands-on-fuzzing-and-exploit-development

Check out our other cybersecurity courses (use below links to avail 60% discount):

Red Team Adversary Emulation: Mimicking a real-world cyber attack - https://courses.yaksas.in/p/adversary-emulation-101-mimicking-a-real-world-cyber-attack/?coupon_code=YCSCGETSTARTED
Hands-on Fuzzing and Exploit Development (Advanced) - https://courses.yaksas.in/p/hands-on-fuzzing-and-exploit-development-advanced/?coupon_code=YCSCGETSTARTED
FREE COURSE: Immunity Debugger for Exploit Devs - YCSC Lab Essentials - https://courses.yaksas.in/p/immunity-debugger-for-exploit-devs-ycsc-lab-essentials/?coupon_code=YCSCGETSTARTED

#ExploitDevelopment #OSCE #OSED #Windows #OSCP