Lab 1 — Hidden Function (SUID Privesc)
Exploiting a SUID binary by overflowing into EIP and redirecting execution to a hidden getshell() function — no shellcode required.
2022-03-14$ grep -r category=Buffer Overflow
3 writeups in this category.
Linux Buffer Overflow Foundation
Buffer overflow fundamentals on Linux: overriding EIP, generating shellcode with msfvenom, finding the buffer address and landing a shell.
2022-03-14
Lab 2 — Linux Stack Overflow with Shellcode
Shellcode injection through an argv overflow on a SUID binary: offset calculation, buffer address discovery and a NOP sled for reliability.
2022-03-14