Buffer Overflow Exploit Development For Beginner

Introduction

I am a beginner in security community and as my fellow beginner, I spend some of my time on platform like Hackethebox and TryHackMe. I was working on a room called Brainpan 1 which I found interesting since it involves reverse engineering windows executable and buffer overflow exploit development.

As they say, "The best way to learn is to teach", I wrote this documentation for beginners in buffer overflow exploit development. Let have fun! 😃 😃 😃

All the source code used in this documentation can be found in the resources folder, including the windows executable.

Table of Contents

• What brainpan.exe does?
• Spiking
• Fuzzing using Python
• Finding the offset
• Overwriting the EIP
• Finding bad characters
• Finding the right module
• Generating shellcode and gaining access