Exploit Fails? Debug Your Shellcode - bin 0x2B

แชร์
ฝัง
  • เผยแพร่เมื่อ 19 พ.ย. 2024

ความคิดเห็น • 94

  • @LiveOverflow
    @LiveOverflow  5 ปีที่แล้ว +151

    Haxember experiment! There will be DAILY videos. I will cover topics I always wanted to cover, but didn't feel like they make for a good dedicated video. These videos take a lot less effort, but they still contain (hopefully) relevant information.

    • @blackbeard4532
      @blackbeard4532 5 ปีที่แล้ว

      LiveOverflow as always great video! Mind if I ask for some guidance? So I want to work as an malware analyst/anything that requires RE but I also would love to exploit things, not just typical ctf binaries but like kernel exploits/pwn2own exploiting level stuff. Which should I focus on improving/working on: reversing or binary exploitation skills?

    • @dominic3606
      @dominic3606 5 ปีที่แล้ว +1

      Modern Heap exploitation would be nice.

  • @MechMK1
    @MechMK1 5 ปีที่แล้ว +52

    "Show me what effort you have put in to solve the problem yourself" - Man I have been preaching this for years. No shame in asking for help, but it shouldn't be the first thing to do.

    • @__mk_km__
      @__mk_km__ 5 ปีที่แล้ว +5

      Unless you are asking google, of course

  • @elio8119
    @elio8119 5 ปีที่แล้ว +8

    A while a go, I had some problems with my shellcode and especially at the injection point. With a lot of research and experimentation I did manage to solve it nonetheless, but now looking at this tutorial it will be far far way easier to debug these kind of problems. Thanks again for posting this !

  • @satyris410
    @satyris410 5 ปีที่แล้ว +4

    Listening on my new headphones, the bass when you type on your keyboard is fantastic!

    • @LiveOverflow
      @LiveOverflow  5 ปีที่แล้ว +16

      should I do some ASMR videos?

    • @aberwarum332
      @aberwarum332 5 ปีที่แล้ว

      No. We want pwn porn

  • @madmushroom8639
    @madmushroom8639 5 ปีที่แล้ว +82

    Ahh the smell of asm on a cold sunday morning

    • @jmullentech
      @jmullentech 5 ปีที่แล้ว +3

      You know, one time we had a box shelled for 12 hours. When it was all over, I logged in. We didn't find one of 'em. Not one stinkin' sysadmin. The smell... you know that ASM smell. The whole lab smelled like ... victory.

  • @Razvi
    @Razvi 5 ปีที่แล้ว +3

    Thank you :) Always enjoying your videos

  • @andrer.6127
    @andrer.6127 5 ปีที่แล้ว +14

    Ever since someone pointed out to me that he kind of looks like Micheal Cera, I cannot stop thinking: "This is the German Micheal Cera'"

    • @ra6160
      @ra6160 5 ปีที่แล้ว

      hahaha right, i know him in Juno movie

    • @artemzaytsev1106
      @artemzaytsev1106 4 ปีที่แล้ว

      i thought he's Indian when i previously watched a video with his face absent. So now he's Indiana Cera.

  • @daviddelille1443
    @daviddelille1443 5 ปีที่แล้ว +2

    Quick hint if msfvenom-generated shellcode is failing: add a couple of NOPs (\x90) to the start. Certain encoders need to decode the actual payload and may end up messing with things in unforseen ways.

  • @mokiros
    @mokiros 5 ปีที่แล้ว +2

    I like the addition of webcam. It makes the video more personalised.

  • @hshhsjhahsvs7728
    @hshhsjhahsvs7728 5 ปีที่แล้ว +25

    Thats a dope hoodie

    • @syntaxyt
      @syntaxyt 5 ปีที่แล้ว +3

      www.blue-tomato.com/de-AT/product/Teddy+Fresh-Patchwork+Hoodie-595502/

    • @pikadroo
      @pikadroo 5 ปีที่แล้ว

      See but then I wonder would it look as good on me. I dunno.

    • @syntaxyt
      @syntaxyt 5 ปีที่แล้ว

      @@pikadroo worth a try? or isn't it?

  • @lemurza5236
    @lemurza5236 5 ปีที่แล้ว

    You have a way of making things really easy to understand and follow along to. Thank you

  • @cortexauth4094
    @cortexauth4094 5 ปีที่แล้ว +2

    I am surprised no one asked him to use gdb -q, I see them almost everywhere xD

  • @nurik31337
    @nurik31337 5 ปีที่แล้ว

    Finally! Good videos on my favourite channel! :)

  • @Abel-tc2fv
    @Abel-tc2fv 5 ปีที่แล้ว

    This is the video that I'm looking for.... Thanks man u cleared some of my doubts.. great video

  • @Cadey
    @Cadey 5 ปีที่แล้ว +3

    Life pro tip, the `printf` command escapes inputs for free.

  • @ljnx8697
    @ljnx8697 5 ปีที่แล้ว

    Ehrenmann, dass du so viele Infos für umsonst raus gibst.
    Grüße aus Berlin!

  • @georgetroulis
    @georgetroulis 5 ปีที่แล้ว

    Insightful as always, your videos are a real gem. Thank you once again :)

  • @BDBD16
    @BDBD16 5 ปีที่แล้ว +1

    You rocking some Teddy Fresh in this video?? H3H3 Represent!!!

  • @____-gy5mq
    @____-gy5mq 5 ปีที่แล้ว +4

    Michael ceratops explains shellcode debugging

  • @amyshaw893
    @amyshaw893 5 ปีที่แล้ว +3

    oh godd... i can see myself doing the exact thing in the first example

  • @metaorior
    @metaorior 5 ปีที่แล้ว +2

    the cameray portrait is too big
    but i love the rest!

  • @Fe-zm8rq
    @Fe-zm8rq 5 ปีที่แล้ว

    Please never change dat intro

  • @berryerpacic9995
    @berryerpacic9995 5 ปีที่แล้ว

    i love the chennel and the ctf stuff u make but in the end its all jibberish to me coz im so far away from all this knowledge... makes me sad sometimes but incurages me to keep learning.. u rock... oh yeah i forgot... du bist der hammer!! ;D.. ich kann nachvollziehen das nicht viele deutsche den channel ansehen weil kaum einer english spricht das macht mich auch traurig.. :/

  • @Tinfoilpain
    @Tinfoilpain 5 ปีที่แล้ว +1

    Is that Ben Eater's 8 bit computer kit?

  • @ClassicGameHacking
    @ClassicGameHacking 5 ปีที่แล้ว

    Beautiful hexplanation!

  • @pikadroo
    @pikadroo 5 ปีที่แล้ว

    What a great hoodie.

  • @ムワ-d7n
    @ムワ-d7n 5 ปีที่แล้ว +3

    Do CTF! Need ROP exploit walkthrough!

  • @testme7073
    @testme7073 5 ปีที่แล้ว

    Great video, man! Quick question; don't exploits that return code execution to the stack not work anymore? It seems to me that ROP and Ret2lib style attacks are the most prominent these days, though I'm obviously asking with the intention to know for sure.

    • @chaoskong2987
      @chaoskong2987 10 หลายเดือนก่อน

      Oh they’re still out there, but most developers worth their salt probably won’t make a mistake that’ll lead to you returning to the stack. Most modern compilers will scream at you to avoid mistakes like that happening.

  • @OGStapler
    @OGStapler 5 ปีที่แล้ว

    Thanks, this cleared so many things !

  • @howto...6298
    @howto...6298 4 ปีที่แล้ว

    hey can u help me out.... I'm trying to solve the HTB headache2 challenge and i dont know what to do...!
    i don't know where to begin.

  • @alexfrns5571
    @alexfrns5571 4 ปีที่แล้ว

    Hey thank you for this great playlists ! I have been trying to shellcode a remote server for a CTF where I did not have the binary. I have been trying quite a few shellcodes from shellstorm and only one worked. Why would some shellcodes work and others won't ? (I was taking all of them in the same architecture (x86-32) and always selecting ones with execve bin/sh). By the way, the source code was just a C program executing the code from read function.

  • @carsonmcmanus8825
    @carsonmcmanus8825 5 ปีที่แล้ว

    Is that a ben eater 8 bit computer kit i see in the background?

  • @username8061
    @username8061 5 ปีที่แล้ว +3

    Hey, LiveOverflow, i know you already answered this on some stream or podcast or something, but i can't find it, so I have to ask again: What's your typing speed?

  • @gunblad3
    @gunblad3 5 ปีที่แล้ว

    Do you have any gdb tutorials to recommend? Or perhaps you already have a video on that?

  • @mabalito
    @mabalito 5 ปีที่แล้ว

    Nice to see you in a TeddyFresh hoodie :)

  • @sayemprodhanananta144
    @sayemprodhanananta144 5 ปีที่แล้ว +1

    I'd like to see a review of RedASM. I think this can be a great alternative to these expensive disassembly softwares

    • @LiveOverflow
      @LiveOverflow  5 ปีที่แล้ว +1

      never heard of that. But checkout Ghidra ;)

    • @sayemprodhanananta144
      @sayemprodhanananta144 5 ปีที่แล้ว

      @@LiveOverflow RedASM is an open source tool. I believe you can find it here redasm.io

  • @alkeryn1700
    @alkeryn1700 5 ปีที่แล้ว

    I once had an exploit in which the software for some reason would always corrupt 3 bytes in the middle of my shellcode at the exact same position
    the fix i had for it is making a nop slide (because i'm too lazy to count) and having an "\xeb\x10" at the begining to bassically jump after the corrupted bytes into the rest of the nop slide and then the shellcode.

  • @etienneparcollet727
    @etienneparcollet727 5 ปีที่แล้ว +2

    Is it a Ben Eater kit I see running in the background?

    • @qwerty123443wifi
      @qwerty123443wifi 5 ปีที่แล้ว +2

      Yes! He's doing (or at least used to do) livestreams building the kit

    • @LordAVX
      @LordAVX 5 ปีที่แล้ว

      That's what I'm going to say!

  • @ases571
    @ases571 ปีที่แล้ว

    Greetings from Spain 🇪🇦 new sub

  • @x3ICEx
    @x3ICEx 4 ปีที่แล้ว

    Video too quiet (as compared with other videos) approx 30% volume boost was needed on my end to be able to hear and understand.

  • @gliderhnr1633
    @gliderhnr1633 5 ปีที่แล้ว

    Thx for explanation.

  • @0110000101110000
    @0110000101110000 5 ปีที่แล้ว

    My experience : Don't put your shellcode just before the return address... The shellcode needs the stack to works, and will therefore modify itself if you do so...
    And it's a pain to debug :')

    • @fooyager
      @fooyager ปีที่แล้ว

      Holy fuckkk broo!!!! I always get a segmentation fault when placing shellcode on the stack even though I try with Trap to Debuger (\xCC) to trace that my shellcode is working and after I try saving the shellcode after the return pointer and it works. Thank you very muchh

  • @Melon-Lord
    @Melon-Lord 5 ปีที่แล้ว

    Me clicking to see if that's a teddy fresh hoodie

  • @yuxin7440
    @yuxin7440 5 ปีที่แล้ว

    How to inject shell code to binary with non-executable stack?

  • @oliverjrose9962
    @oliverjrose9962 5 ปีที่แล้ว +3

    damm, where's that hoodie from?

    • @TheAmmOmatic
      @TheAmmOmatic 5 ปีที่แล้ว +1

      it looks like teddyfresh, hila from H3H3's brand.

    • @oliverjrose9962
      @oliverjrose9962 5 ปีที่แล้ว +1

      @@TheAmmOmatic perfect, thanks

    • @federicoscrinzi3552
      @federicoscrinzi3552 5 ปีที่แล้ว

      Interested as well, looks cool!

  • @syntaxyt
    @syntaxyt 5 ปีที่แล้ว

    Lool hab mir gerade letzte Woche auch einen colorblock Hoodie von Teddy Fresh gekauft xD

  • @wielkizderzaczhadronowkucy293
    @wielkizderzaczhadronowkucy293 5 ปีที่แล้ว

    why int 0x80 sometimes isn't working tho

  • @nikhilt3755
    @nikhilt3755 5 ปีที่แล้ว

    in windows exploit development
    when using python to exploiting overflow in vulnserver or any other software
    be sure u encode in following way
    shellcode+=("your_shellcode_here")
    shellcode = shellcode.encode('raw_unicode_escape')
    and then run the program
    if you send directly as strings this not gonna work
    i was fucked for so many hours when directly sending string format
    also
    use struct module to pack any address to be expressed as big endian format

  • @DrensLP
    @DrensLP 5 ปีที่แล้ว

    Where did you get that Hoodie?! 😁

  • @hayline
    @hayline 5 ปีที่แล้ว

    HEEY VERY GOOD TNKS VERY TANKYOU

  • @FoxMaccloud
    @FoxMaccloud 5 ปีที่แล้ว

    Can you get C code or something higher than asm from shellcode?

    • @kneesnap1041
      @kneesnap1041 5 ปีที่แล้ว

      If the author of the shell code provides it yes. Of course, you could just disassemble it and turn it into C yourself. Since there are only a dozen or so instructions that's actually pretty manageable if you've never reversed anything before.

  • @gyroninjamodder
    @gyroninjamodder 5 ปีที่แล้ว

    >caused a segfault
    No, a sigill was triggered.

  • @joshaprior3699
    @joshaprior3699 5 ปีที่แล้ว

    I love you!!!!

  • @mrgummage
    @mrgummage 5 ปีที่แล้ว

    Tell me more about that interesting breadboard on your desk. 🤔

    • @kebien6020
      @kebien6020 5 ปีที่แล้ว

      He is building an actual computer from scratch. He is more or less following the steps laid out in a series by ben eater on a breadboard 8-bit computer. You can watch his streams of this build on LiveOverflow's twitch.

    • @mrgummage
      @mrgummage 5 ปีที่แล้ว

      @@kebien6020 I was wondering if it was the Ben Eater project.
      Curious to it myself.

  • @negativegravity9470
    @negativegravity9470 4 ปีที่แล้ว

    Protip!
    Zsh (oh-my-zsh) escapes the shellcode without the -e flag

  • @frit00701
    @frit00701 5 ปีที่แล้ว

    Lol i needed this tutorial 2 days ago

  • @Omaroka
    @Omaroka 5 ปีที่แล้ว +3

    Michael Cera?

  • @adityapatwardhan72
    @adityapatwardhan72 5 ปีที่แล้ว

    Yo bois

  • @bool2max
    @bool2max 5 ปีที่แล้ว

    Don't you need to pass -e to echo in order for it to interpret the \x sequences?

    • @bool2max
      @bool2max 5 ปีที่แล้ว +2

      well nevermind

  • @NarendraSingh-pv3km
    @NarendraSingh-pv3km 5 ปีที่แล้ว

    this shows copy and paste is not solution for everything you're trying some things still needs some small attention 🤠

  • @satyris410
    @satyris410 5 ปีที่แล้ว

    You know when I was 14/15 I nearly did it, became just as elite. I installed suse Linux on a partition. Bought the manual and everything. But I couldn't find drivers for my damn modem that would work. So I couldn't get on the Internet (this was 1999) and my hacking project died there =(

  • @dlive7923
    @dlive7923 5 ปีที่แล้ว

    I think qiling ( github.com/qilingframework/qiling ) can help you debug and analyze shellcode.

  • @GegoXaren
    @GegoXaren 5 ปีที่แล้ว

    What the hell is that sweater?

  • @JaytleBee
    @JaytleBee 5 ปีที่แล้ว

    I really like your videos *a lot* and have a great deal of respect for you but your accent eludes me.
    I mean, your account says you're from Germany and your pronunciation also sounds German but sometimes you have really weird grammar that doesn't really work in German or English?
    For example in the first part of the video:
    "Because I get often questions..."
    The more natural way to say this in English would be "Because I often get questions"
    But! In German the sentence in this context would be "Weil ich oft Fragen kriege" (or something similar) WHICH HAS THE SAME ORDER OF WORDS EXCEPT TWO DIFFERENT WORDS ARE SWAPPED
    Again, please don't misunderstand this as critique or an insult (As a German, I totally get how hard it is to speak English well!). It's just that the mistakes you make genuinely intrigue me.

  • @lifeenjoy.
    @lifeenjoy. 5 ปีที่แล้ว

    1st