README.md

Simple stack buffer overflow server

This simple C program (main.c) expose a stack injection vulnerablity. This program can also be run as a TCP server using the make serve_vulnerability command.

Goal

The main goal of this challenge is to run arbitrary code (a shellcode f.e) on the server's host machine exploiting the stack buffer overflow vulnerability.

A further goal is to write a Metasploit exploit to automate the vulnerability exploitation.

Useful ressources

• Stack buffer overflow (Wikipedia)
• Buffer overflow exploit
• Classic Buffer overflow exploits on Linux x64
• Protections against buffer overflow exploits in Linux
• Generating Alphanumeric Shellcode with Metasploit
• Writing an exploit for Metasploit

Solution