Documentation
README
Exploiting Stack Buffer Overflows
When to Use
- During authorized binary exploitation assessments, CTF-style engagements, or vulnerability research where a native program (ELF/PE) copies attacker-controlled data onto the stack without bounds checking.
- When a target uses unsafe functions such as
strcpy,strcat,sprintf,gets, or misuses length-taking functions likefgets,read,memcpy, orsscanfwith an unbounded%s. - When a service crashes with a
Segmentation Faultafter large input, and you need to determine whether the saved return address (EIP/RIP) is controllable. - As the entry-point methodology that feeds into ret2win, stack shellcode, ret2libc, ret2syscall, and ROP techniques.
Critical: Concepts/Steps Most Often Missed
This is the opening of the README. Read the full README on GitHub.