Buffer Overflows OSCP

Buffer Overflows

Ah the buffer overflow! I was initially scared of this topic. The scariest section turned out to be my favorite section! I feel like I'm in Calculus 1 again, which is fun. Follow the eight steps, remember some rules, and practice beforehand is how I'm preparing.

Buffer Overflows feel like sparring. There are certain obstacles that may come up. There are rules on how to handle these issues. My goal is to keep adding to the list down below.

Sparring Rules

• If a bad character takes up two spaces (AD, DO) for (11, 12), odds are just 11 is a bad character.
• If the return address contains a bad character (625011af), then another return address must be chosen.
• linux/x86/shell_reverse_tcp is an option if windows/shell_reverse_tcp is not working. Think if Wine is running on Linux.

Hands On Resources In Order

1. TCM Buffer Overflow Videos. Learn the 8 steps here.
2. TryHackMe BufferOverflowPrep Room. Do this room after watching the 8 TCM videos.
3. TryHackMe BrainPan. This is a box you want to do before the OSCP. I found this box to be easy.

Next Steps

I've only practiced on Windows x86 architecture. I'm trying to find resources on Linux buffer overflows. I'll edit this blog post when I find and vet resources.