Загрузка...

Automate Buffer-Overflow Exploits — BOF-TOOL Walkthrough (OSCP / CTF Prep)

BOF-TOOL — Buffer overflow exploitation toolkit (Fuzz → Offset → Badchars → JMP ESP → Payload)
Author: Balogun Basit
GitHub • https://github.com/Basit2002/bof-tool

🔔 Subscribe for more exploit-dev tooling, CTF walkthroughs, and security tutorials:
https://www.youtube.com/channel/yourchannel

────────────────────────────────────────────
📺 VIDEO: BOF-TOOL — Build & Deliver a Buffer-Overflow Exploit (Full Demo)
────────────────────────────────────────────

In this video I demo **BOF-TOOL**, a modular Bash toolkit I built to automate the common stages of buffer-overflow exploit development:
- Fuzz the target to find crash size
- Determine exact EIP/RIP offset
- Test for bad characters (bytes to avoid)
- Locate a `jmp esp` or similar gadget
- Build shellcode payload (msfvenom) and deliver a reverse shell

All demoed end-to-end on a safe, local vulnerable VM. This content is for **educational purposes only** — do not use on systems you do not own or have explicit permission to test.

────────────────────────────────────────────
🔗 Useful links
────────────────────────────────────────────
Project: https://github.com/Basit2002/bof-tool
Demo targets (examples used in testing): brainpan1ctf, Harry Potter: Fawkes (CTF)
Tooling referenced: gdb, msfvenom, netcat
────────────────────────────────────────────
🛠 Requirements & Notes
────────────────────────────────────────────
• Linux (Kali / Debian recommended)
• gdb, python3, netcat, ropper, msfvenom (Metasploit)
• Only test on VMs/targets you own or have permission to use.
• The repo includes example scripts; review code before running.

────────────────────────────────────────────
📣 Disclaimer
────────────────────────────────────────────
This video and BOF-TOOL are intended for educational use only. Do NOT use these techniques on systems you do not own or have explicit permission to test. The author is not responsible for misuse.

────────────────────────────────────────────
👍 Like • Share • Subscribe
────────────────────────────────────────────
If you find this useful, please ⭐ the GitHub repo and hit Subscribe. Questions, suggestions, or PRs are welcome.

────────────────────────────────────────────
#Tags
────────────────────────────────────────────
#bufferoverflow #exploitdev #ctf #pentesting #bash #gdb #msfvenom #netcat #oscp

Видео Automate Buffer-Overflow Exploits — BOF-TOOL Walkthrough (OSCP / CTF Prep) канала Basit Balogun
Яндекс.Метрика
Все заметки Новая заметка Страницу в заметки
Страницу в закладки Мои закладки
На информационно-развлекательном портале SALDA.WS применяются cookie-файлы. Нажимая кнопку Принять, вы подтверждаете свое согласие на их использование.
О CookiesНапомнить позжеПринять