/Binary-exploitation

Binary exploitation. (I'll do some more work when I get motivated again)

Primary LanguagePython

Guidance for beginners:

If you're COMPLETELY new to binary exploitation and memory in general, I'd stack out with /memory/stack and get a comfortable understanding of what the stack is, how it's layed out in memory and even more important, how to exploit it. This repository does not explain how to do trivial non-protected buffer overflow walkthroughs, this repository is primarily for me to learn because I learn best by teaching, but might as well make this public is for people to understand more advanced concepts. After learning more about memory structure, and some decent assembly knowledge, go from non-protected buffer overflow exploits to learning about ROP which I give an introduction to in /stack/ROP/ret2libc. As I said, this is primarily for me to learn. But I will make it worth your time and link some useful articles revolving around pwn:

Links to actual good resources:

Starting binary exploitation - https://ir0nstone.gitbook.io/notes/

Introduction heap exploitation - https://github.com/shellphish/how2heap

More advanced heap exploitation - https://u03b5.github.io/

Heap exploitation videos - https://www.youtube.com/watch?v=6-Et7M7qJJg && https://www.youtube.com/watch?v=s-GJ-buCGio

Binary exploitation playlist - https://www.youtube.com/watch?v=iyAyN3GFM7A&list=PLhixgUqwRTjxglIswKp9mpkfPNfHkzyeN

Binary exploitation x64 intro - https://valsamaras.medium.com/introduction-to-x64-linux-binary-exploitation-part-1-14ad4a27aeef

Great CTF website for pwn - https://pwnable.tw/ (Hard as FUCK)

Website to train your ROP skills - https://ropemporium.com/

Introduction to x86-64 assembly - http://www.egr.unlv.edu/~ed/assembly64.pdf

Great for exploit development - https://pwn.college/

Quick and easy binexp playlist - https://www.youtube.com/watch?v=TqGMVRV2l9s&list=PLiCcguURxSpbD9M0ha-Mvs-vLYt-VKlWt

Plugins:

Gef - https://github.com/hugsy/gef

ROP gadget - https://github.com/JonathanSalwan/ROPgadget