Today, I triumphed on hacking an application software, namely, VLC player.
I used the technique called BUFFER OVERFLOW (stack-based) and succeeded in control the program flow and got it to execute my BENIGN CODE (not malicious at all lol). I feel so good now.
This is my first hack. I wouldn't say that I know all I need to know about buffer overflow right now, but I do know enough to crash a careless written software. I learned a lot from this first hack, and I enjoyed the fun of hacking. This is my first step of being a hacker.
The exact technique I used in this hack is "Jump to Register" technique. Specifically, I used jump esp. This technique makes buffer overflow easier and more reliable. In this way I do not have to guess or calculate what address to jump to.
I spent a lot of time on this today, I need to sleep now.
http://tinyurl.com/dlqyr4 -> A great website explaining what buffer overflow is and how to do it
http://tinyurl.com/aodfy -> Some rough ideas about jmp esp technique
No comments:
Post a Comment