- Lab
-
Libraries: If you want this lab, consider one of these libraries.
- Security
Linux Buffer Overflow Exploitation
You are an exploit developer tasked with developing exploits for known vulnerabilities in critical applications at Globomantics. A colleugue has discovered two vulnerabilities in the internal **endpointX** Linux application. Your task is to take the two proof-of- concept codes and weaponized them to prove exploitation of the application. You will be provided with common tools and techniques to bypass **No-eXecute** and **ASLR** mitigations and exploit a remote host in the Globomantics lab environment.
Lab Info
Table of Contents
-
Challenge
Understand the target
Familiarize yourself with the target application, the remote target, and the stack-based buffer overflow and memory disclosure proof-of-concept codes.
-
Challenge
Establish control and defeat ASLR
Consolidate the two proof-of-concept codes into one, discover the saved return address offset on the stack to control code flow, and calculate the base address of
libcusing the memory disclosure PoC. -
Challenge
Build the final exploit
Build a ROP chain that executes the
systemfunction with an arbitrary command to gain control of the remote host.
Real skill practice before real-world application
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Learn by doing
Engage hands-on with the tools and technologies you’re learning. You pick the skill, we provide the credentials and environment.
Follow your guide
All labs have detailed instructions and objectives, guiding you through the learning process and ensuring you understand every step.
Turn time into mastery
On average, you retain 75% more of your learning if you take time to practice. Hands-on labs set you up for success to make those skills stick.