All geek questions in one place

Buffer overflow environment setup

I am currently reading several safety books (my passion) regarding safe programming, however either the distribution they provide on disk is broken or does not exist at all. Books: Hacking The art of exploiting 2nEd, hacking the gray Hat 2nEd The problem is that when I try to follow the examples, it is obvious that the new distributions have stack protection and other security features implemented to prevent these situations, and I tried to manually configure the environment provided using hacking art exploitation, but I failed. I also tried to use DVL (Dam Vulnerable Linux), but its too bloated, I just want the minimal environment that I can have in a small section, and choose from the bootloader or have in a small virtual box.

So my question is this: how do I configure the environment (distro old kernel) on which I can follow most of these examples. Perhaps if someone tells me the version of the DVL kernel and GCC, I can get more out of this to configure myself.

+3
source share
3 answers

​​ , . gcc, , "-fno-stack-protector". , , , , , , 0x41414141.

"bloat" linux, redhat 5 slackware .

+2

DVL, :

$ uname -r
$ gcc --version

.

: distrowatch.com ​​linux 2.6.20, gcc - 3.4.6

+1

There is an article on the sevagas website related to your question: How to set up a buffer overflow testing environment

0
source

Source: https://habr.com/ru/post/1719152/

More articles:


All Articles