Skip to content
0:00 / 0:00

#pwntools#gdb#bufferoverflow

Pwntools & GDB for Buffer Overflow w/ Arguments (PicoCTF 2022 #43 'buffer-overflow2')

John Hammond

2.1M subscribers • 1 video on Hallway

YouTube
  • Recommended by 1 person: 1 in engineering communities.
  • Presented by John Hammond

Intermediate. Assumes working knowledge.

57K views4 years ago1 recommendation

SecurityExploits and vulnerabilitiesDebugging

John Hammond demonstrates how to use Pwntools and GDB to solve a PicoCTF buffer overflow challenge with arguments.

(PS, jump into the HackTheBox Cyber Apocalypse CTF! jh.live/htb-cyber-apocalypse2022) Help the channel grow with a Like, Comment, & Subscribe! ❤️ Support ➡ jh.live/patreon ↔ jh.live/paypal ↔ jh.live/buymeacoffee Check out the affiliates below for more free or discounted learning! 🖥️ Zero-Point Security ➡ Certified Red Team Operator jh.live/crto 💻Zero-Point Security ➡ C2 Development with C# jh.live/c2dev 👨🏻💻7aSecurity ➡ Hacking Courses & Pentesting jh.live/7asecurity 📗Humble Bundle ➡ jh.live/humblebundle 🐶Snyk ➡ jh.live/snyk 🌎Follow me! ➡ jh.live/discord ↔ jh.live/twitter ↔ jh.live/linkedin ↔ jh.live/instagram ↔ jh.live/tiktok 📧Contact me! (I may be very slow to respond or completely unable to) 🤝Sponsorship Inquiries ➡ jh.live/sponsorship 🚩 CTF Hosting Requests ➡ jh.live/ctf 🎤 Speaking Requests ➡ jh.live/speaking 💥 Malware Submission ➡ jh.live/malware ❓ Everything Else ➡ jh.live/etc

Why it's here

1 person recommends this

What people say. Recommended as a good example of using scripting tools to interact with binaries during exploit development.

u/Axman6in r/haskell • Recommends

On “Using Haskell as a pentester”

…taking an advanced pen testing course at the moment, and would love to be able to use Haskell for it. Every time I watch videos online that end up using python, I think to myself how I'd do the same thing in Haskell. I'd love to have a package like pwntools which just made lots of hacking tasks easier - a monad for interacting with binaries (see [video for a good example of it being used to write code once to interact with a local binary and a remote one). Tools that make it easier to write payloads to exploit thing (pattern generation and offsets, automate passing arguments onto the stack when you have overflows). Web helpers, which shouldn't be too hard given how good our web libraries…