BUFFER OVERFLOW ATTACKS
PART 1 EXPANDING ON BUFFER OVERFLOWS CHAPTER 1 BUFFER OVERFLOWS THE ESSENTIALS THE CHALLENGE OF SOFTWARE SECURITY MICROSOFT SOFTWARE IS NOT BUG FREE THE INCREASE IN BUFFER OVERFLOWS EXPLOITS VS BUFFER OVERFLOWS MADONNA HACKED SOLUTIONS FAST TRACK FREQUENTLY ASKED QUESTIONS CHAPTER 2 UNDERSTANDING SHELLCODE AN OVERVIEW OF SHELLCODE THE TOOLS THE ASSEMBLY PROGRAMMING LANGUAGE WINDOWS VS UNIX ASSEMBLY THE ADDRESSING PROBLEM USING THE CALL AND JMP TRICK PUSHING THE ARGUMENTS THE NULL BYTE PROBLEM IMPLEMENTING SYSTEM CALLS SYSTEM CALL NUMBERS SYSTEM CALL ARGUMENTS SYSTEM CALL RETURN VALUES REMOTE SHELLCODE PORT BINDING SHELLCODE SOCKET DESCRIPTOR REUSE SHELLCODE LOCAL SHELLCODE EXECVE SHELLCODE SETUID SHELLCODE CHROOT SHELLCODE LINKS TO SITES MAILING LISTS CHAPTER 3 WRITING SHELLCODE SHELLCODE EXAMPLES THE WRITE SYSTEM CALL REVERSE CONNECTION SHELLCODE SOCKET REUSING SHELLCODE REUSING FILE DESCRIPTORS ENCODING SHELLCODE REUSING PROGRAM VARIABLES OPEN SOURCE PROGRAMS CLOSED SOURCE PROGRAMS OS SPANNING SHELLCODE UNDERSTANDING EXISTING SHELLCODE CHAPTER 4 WIN32 ASSEMBLY APPLICATION MEMORY LAYOUT APPLICATION STRUCTURE MEMORY ALLOCATION STACK MEMORY ALLOCATION HEAP HEAP STRUCTURE WINDOWS ASSEMBLY STACK REGISTERS OTHER GENERAL PURPOSE REGISTERS EIP REGISTER DATA TYPE HELLO WORLD SECTION 1 CASE STUDIES CASE STUDY 1 1 FREEBSD NN EXPLOIT CODE EXPLOITATION CODE DUMP CASE STUDY 1 2 XLOCKMORE USER SUPPLIED FORMAT STRING XLOCKMORE VULNERABILITY DETAILS CASE STUDY 1 3 FRONTPAGE DENIAL OF SERVICE UTILIZING CODE DUMP APPLICATION DEFENSE HACK H CODE DUMP CASE STUDY 1 4 CURL BUFFER OVERFLOW ON FREEBSD EXPLOIT CODE PART II EXPLOITING BUFFER OVERFLOWS CHAPTER 5 STACK OVERFLOWS INTEL X86 ARCHITECTURE AND MACHINE LANGUAGE BASICS STACKS AND PROCEDURE CALLS STORING LOCAL VARIABLES CALLING CONVENTIONS AND STACK FRAMES INTRODUCTION TO THE STACK FRAME PASSING ARGUMENTS TO A FUNCTION STACK FRAMES AND CALLING SYNTAXES PROCESS MEMORY LAYOUT STACK OVERFLOWS AND THEIR EXPLOITATION SIMPLE OVERFLOW CREATING AN EXAMPLE PROGRAM WITH AN EXPLOITABLE OVERFLOW189 WRITING OVERFLOWABLE CODE DISASSEMBLING THE OVERFLOWABLE CODE PERFORMING THE EXPLOIT