buffer overflow exploitation

SKILL.md

Execute systematic buffer overflow vulnerability discovery and exploitation against Windows applications to achieve remote code execution. This skill enables comprehensive fuzzing to identify crashes, determination of EIP offset, bad character identification, JMP ESP location discovery, shellcode generation, and final exploit construction for penetration testing and OSCP-style assessments.

Create Fuzzing Script Systematically send increasing buffer sizes to identify crash point:

Generate Unique Pattern Create a non-repeating pattern to identify exact offset:

当用户要求“利用缓冲区溢出漏洞”、“开发基于堆栈的漏洞”、“查找 EIP 偏移量”、“识别坏字符”、“创建 shellcode 有效负载”、“对崩溃进行模糊测试”或“通过内存损坏获得远程代码执行”时，应该使用此技能。它提供了用于发现和利用 Windows 应用程序中的缓冲区溢出漏洞的全面技术。 来源：zebbern/secops-cli-guides。

查看原文