Vulnerability and Usage Studies

Question

I understand the general idea of ​​exploiting vulnerabilities. Buffer overflows and the like, but I think I DO NOT REALLY receive it.

Are there any useful sources of information that explain this area well? Maybe case studies on how certain vulnerabilities are exploited?

Even more interesting would be how the projects you worked on suffered from such problems.

I am not trying to find out about existing vulnerabilities that I could exploit. I'm trying to understand how this area can affect any projects that I can work on.

Answer 1

iss.net , , .

Answer 2

Corelancoder! https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/

1 - BOF ,..., 12 - ROP. , , , /.

, , - , . Metasploit ( ) - . , Metasploitable http://www.offensive-security.com/metasploit-unleashed/Requirements#Metasploitable

Answer 3

, "A Bug Hunter Diary: A Guided Tour Through the Wilds of Software Security"

, . , , .

"The shellcoders handbook", , "The bug hunter diary" "The shellcoders handbook" , .

" http://www.exploit-db.com", , , , , , , , , , calc.exe:)

, - , , , .