buffer overflow exploitation

SKILL.md

Execute systematic buffer overflow vulnerability discovery and exploitation against Windows applications to achieve remote code execution. This skill enables comprehensive fuzzing to identify crashes, determination of EIP offset, bad character identification, JMP ESP location discovery, shellcode generation, and final exploit construction for penetration testing and OSCP-style assessments.

Create Fuzzing Script Systematically send increasing buffer sizes to identify crash point:

Generate Unique Pattern Create a non-repeating pattern to identify exact offset:

當用戶要求“利用緩衝區溢出漏洞”、“開發基於堆棧的漏洞”、“查找 EIP 偏移量”、“識別壞字符”、“創建 shellcode 有效負載”、“對崩潰進行模糊測試”或“通過內存損壞獲得遠程代碼執行”時，應該使用此技能。它提供了用於發現和利用 Windows 應用程序中的緩衝區溢出漏洞的全面技術。 來源：zebbern/secops-cli-guides。

查看原文