SIEGECAST: Buffer Overflow 101

#cybersecurity #hacking #infosec

Penetration Testing
Web Application Penetration Testing
Ransomware Readiness Assessment
Mobile App Assessment
Remote Access Assessment
Purple Team
Red Team & Adversary Emulation

Let our offense, prepare your defense.
[email protected]
______________________________________________________________

Today, Red Siege gives you all the tools and techniques you need to write your first Buffer Overflow
SiegeCast: "BUFFER OVERFLOW 101"
Presented by
Mike Saunders ( [email protected] )

There are lots of us who want to know more but are either overwhelmed by the idea that buffer overflows are beyond our capabilities or just don’t know where to get started. This is a 101-level talk; Mike Saunders talks about how a buffer overflow works, how to fuzz an app to identify an overflow opportunity, and how to create a simple overflow that will result in a compromise of a target system. By the end, you will have the information and resources needed to write your first overflow.


Slides: https://redsiege.com/buffer101

Follow Us
Twitter: https://twitter.com/redsiege/
Facebook: https://facebook.com/rsiege/
Linkedin: https://www.linkedin.com/company/reds...

_______________________________________________________

Red Siege Founder: Tim Medin ([email protected])
Twitter: @timmedin

Red Siege is an information security consulting company that concentrates on the latest threats to organizations today. We perform in-depth analysis, determine organization/business risk, and find the vulnerabilities before the bad guys do. Our team includes internationally renowned experts who have been featured in international news outlets and conferences, including The Wall Street Journal, The Washington Post, a News Channel Asia Documentary.

https://redsiege.com

#hacking #redteam #penetrationtesting #pentest #bufferoverflow

00:00 Buffer Overflow 101
00:21 Stuff About Mike
00:40 Why Are We Talking About Buffer Overflows?
1:49 Assumptions About Buffer Overflows
2:33 What is a Buffer Overflow?
3:43 Background - The Stack
4:46 The Stack Visualized
8:00 Registers
10:16 Stack Buffer Overflow Visualized
16:08 Explanation of Demo Videos
18:03 Python Script Demo Video 1
20:55 Key Points to Remember
21:55 Demo Video Continued
23:56 Pattern Create Key Points
25:39 Finding Offset
26:06 Verifying Our Offset
26:22 Python Script Demo Video 2
28:07 Introducing JMP ESP
29:21 Locating a JMP ESP
30:46 Demo Video 3
40:23 Injecting Shellcode Key Points
42:03 More Learning Opportunites
43:42 Credits & Thank You's
44:37 Resource Links