Buffer Overflow Exploit Development For Beginner

Introduction

I am beginner in security community and as my fellow beginner, I spend some of my time at platform like Hackethebox and TryHackMe. I was working on a room called Brainpan which I found interesting since it involves reverse engineering windows executable and exploit it. I will focus on the windows execution reverse engineering and exploitation of the buffer overflow vulnerability.

As they say, "The best way to learn is to teach", I wrote this documentation for beginners in buffer overflow exploit development. Let have fun! 😃 😃 😃

All the source code used in this documentation can be found in the resources folder, including the windows executable.

Table of Contents

• What brainpan.exe does?
• Spiking
• Fuzzing using Python
• Finding the offset
• Overwriting the EIP
• Finding bad characters
• Finding the right module
• Generating shellcode and gaining access