Lab 1 — Hidden Function (SUID Privesc)
Exploiting a SUID binary by overflowing into EIP and redirecting execution to a hidden getshell() function — no shellcode required.
2022-03-14$ filter --tag suid
2 posts tagged #suid.
Lab 2 — Linux Stack Overflow with Shellcode
Shellcode injection through an argv overflow on a SUID binary: offset calculation, buffer address discovery and a NOP sled for reliability.
2022-03-14