Learn Buffer Overflows from one of the masters - Stephen Sims - SANS instructor, course developer and well known reverse engineer with over 20 years of experience! Big thanks to Brilliant for sponsoring this video! Get started with a free 30 day trial and 20% discount: brilliant.org/DavidBombal // A bit about Stephen // Stephen is an industry expert with over 20 years of experience in information technology and security. He's authored SANS most advanced course, SEC760: Advanced Exploit Development for Penetration Testers, was the 9th person in the world to earn the GIAC Security Expert certification (GSE), and co-author of the Gray Hat Hacking book series, as well as a keynote speaker who's appeared at RSA USA and APJ, OWASP AppSec, BSides events and more. On top of all this, Stephen is Curriculum Lead for SANS Offensive Operations. // Stephen's Social // Twitter: twitter.com/Steph3nSims KZread Live: www.youtube.com/@OffByOneSecurity/streams KZread videos: www.youtube.com/@OffByOneSecurity/videos E-mail: Stephen(at)deadlisting.com SANS: www.sans.org/profiles/stephen-sims/ // Stephen's Book // Grey Hat Hacking: amzn.to/3B1FeIK // David's Social // Discord: discord.gg/davidbombal X: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal // Menu // 00:00 - Buffer overflows 00:50 - Sponsor 01:36 - Stephen Sims introduction 03:21 - Overview of buffer overflows 04:44 - Future of buffer overflows 09:17 - C program demo 14:14 - strcopy vulnerability 14:45 - Shell code role 18:45 - Rust vs C? 20:05 - Rust vs other languages 21:23 - Heap & stack memory 26:32 - SigRed vulnerability 29:02 - DNS query role 30:49 - Heap overflow cause 35:00 - No args program check 37:06 - Program overview 41:10 - Hex & Stack 42:29 - Buffer overflow demo 42:53 - Determining buffer size 45:03 - Authentication bypass 50:33 - ASLR & Exploitation 52:01 - Memory & Environment buffer buffer overflow buffer overflow attack windows linux exploits Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place on any websites. Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

@BlackUfo0_0

11 ай бұрын

Thank you, David, for these very useful videos for us. I wish you would have another channel in which the videos would be dubbed into Arabic so that they would benefit the Arab community. Thank you once again. ❤❤

I always love when Stephen Sims is on. He's such a great teacher. Thanks!

I was hoping for so long for you to bring Stephen again on your show David, you're both amazing! Thank you!! Please bring him again if possible

I'm in love with those long tutorial and demo, thank you David & Steph

@davidbombal

11 ай бұрын

Glad you like them!

David thank you so much for this video!! As someone passionately interested in exploit development, this information is invaluable!! Thank you

That was just genius, masterclass-level stuff. I will be watching this many times. In my final quarter at Uni I had a malware analysis class where whe dug into the registers, the stack frame, instruction pointers, the PE header, and using olly debug to RE some malware was the Final. I did great, but one quarter was not enough lol. Not nearly. A lot of this was familiar, but reinvigorated my curiosity. This dude is clearly an absolutely incredible instructor. Looking forward to the re-watches of this one. !

@philfoulup

5 ай бұрын

Yeah, Stephen Sims is the real deal. Guess that is why those Sans courses are big $ 😂 I knew I recognized the name; years ago I had some bootleg sans coursework in pdf and the exploit dev module (SANS 760 iirc) was written by him. Just recently discovered his KZread content and I’m excited. Very hard to find genuinely great intermediate to advanced tutorial knowledge. Feels like sometimes everything is geared toward beginners and once you get past the basics all other info is buried in a sea of “hello world” videos. Great to see quality teaching of more advanced topics in tech!

Anytime I see Stephen I know we're in for a technical treat. His channel is fantastic for anyone who wants to get into the specifics of different types of attacks.

@tsunningwah3471

5 ай бұрын

bbb

Pretty interesting content, buffer overflow is old school but never gets old. Thanks for sharing

It's great to see that i was studying Buffer overflow and here is the video to understand Better. David you are doing right thing!

these 2 have ocean of knowledge. It's a delight to watch this video. Thanks David and Stephen

It is chef's kiss content, explanations were on point, thanks for bringing such a brilliant guest to your channel

Sims is a legend. Hope to see some reversing in the future.

Very cool. I have used Ghedria to do this but this is the first time I have seen it done with gef. This really helped with my understanding of these overflows. I understood the process but not really all the details. More like this please.

Fantastic guest! Great video David, you're really outdoing yourself.

@davidbombal

11 ай бұрын

Thank you! Glad you enjoyed it

Very informative video, I learned what I didn't know, let Stephen come again

You are the best person in this field. I am from Egypt and I love you very much because you are a fun person and your explanation is simple and easy.

@davidbombal

11 ай бұрын

Very kind of you to say that :)

David Bombal your are amazing person who always helps people Big thanks

@davidbombal

11 ай бұрын

Thank you! Helping people is really important :)

Your doing a great job David. Thank the content.I did send you a messsege via your support mail.May you continue inspiring many.

Great work including the programing!

Amazing video! Thanks for sharing :) so interesting and great show and tell! Fascinating

I wish Stephen and Ocupy the web in one program that will be a hell of crazy fantastic. Thank you David .

wow 😯😲 Amazing,so many topics got revised and learnt a lot ,thanks david for such content.

I finished linux basic foundation, ready to learn more for any Linux distribution commands BASH (kali, Ubuntu, Debian and more)!!

Amazing! Pro stuff Stephen and David. Can Stephen return to this channel with some basic intros into Buffer overflow, the reverse shell, and all the cool stuff we've seen here? Or if you could share some pointers to his work in case this content already exists?

I love how you collab with other content creators, more content like this🤜🏻

@davidbombal

11 ай бұрын

Thank you! Glad you enjoy it! It's great to collaborate with others as no one can know everything.

Great video! more technical videos like this pls.

Excellent video! Thank you!

This is excellent! Thanks

Woo MrBombla it looks like it's inevitable for the futur n egeneers to learn coding thx for that

Thank you David for good tontent!

what an amazing explanation thank you for the content

love ur work man trust me

@davidbombal

11 ай бұрын

Thank you! I appreciate that!

Excellent!

'Buffer, The Vampire's Layer'

@davidbombal

11 ай бұрын

lol

been wanting to get taught this since i didnt in university business IT degree... lol thanks highest education tube

This has to be one of my favorite vidoes so far from you @davidBombal PLEASE MAKE MORE EXPLORING IN DEPTH BoF!!

Smashing the stack... Buffer overflow still with us? I guess I shouldn't be surprised.

Thanks for this tutorial 28:36

simply awesome 🔥💥

If I want to get into pen Testing is it better to get a SOC or help desk position first or just start pen Testing?

I remember demonstrating a buffer overflow in my University course back in 2007. I demonstrated a buffer overflow in a Microsoft Access by opening the CD Drive when you opened a malformed Microsoft Access file. Are buffer overflows still relevant today?

one of the best fucking things I've seen on youtube.

amazing

Hey David I've been a subscriber for a while now, and I loved your content since the beginning, I noticed that you've done a video about scripting in python using the telnet lib and gns3, I'm currently on a remote internship ( Network/ Software ), the task requires a connection to the cisco router or switch so I implemented a solution using telnetlib, but I need now to implement a serial connection which got me stuck because I've been searching for a way to emulate the serial communication ( we usually do in putty when connecting the router with the console cable ) between a python script from my computer and the emulated device in gns3. I would appreciate any help

for heap overflow ? could you explain please ?or , is it the same principe ?

are all these things that you all present possible on new cisco systems, palo alto systems etc, since you made an emphasys on cisco firewall being a massive box?

I like stuff like this! Linux is BOMB if it were'nt MS would not include cgwin into powershell

Is it important to know low level languages such as assembly code and the x86 something he mentioned in the sig red example in modern times my teach said its old languages and dont matter but i feel likes hes wrong?

So instead of making the stack pointer only writable to control statements, you mark data as not executable, so when due to lack of bounds checking the stack pointer is overwritten, it's not executable, which it wasn't in the first place, so execution resumes with your data, which can't be executed due to DEP, so use the executable heap memory instead of the stack and poorly-written code to overwrite the heap pointer with a known function and your choice of parameter such as a path to an executable into a popen.

I always wondered about the differences between C and C##.

David, can you make a video explaining how memories work? Stephen references always to memory addresses but what is that?

david tell him to zoom in on his screen on his youtube we cant see the commands he types or anything great video by the way

Feel free to correct me if I'm wrong, but couldn't this be used to jailbreak an iPhone? obviously not by itself, but as a way of obtaining escalated privileges

14:10 Couldn't the developer include a guard clause in the function that throws an error in the event that the input being passed exceeds the buffer size?

David could you kindly share the best courses on linux and database administrator..

1. I may have learned more from watching things NOT go according to plan than I would have if everything went smoothly. 2. I have a deep love for anything command line, so watching Sims run through some live command line exploits was like... *muah~*.

❤❤

More Of This exploitation. Very very good video

53:39 core memory dump would have saved everything including env vars. Then look at the dump right?

thanksforthehelp

❤

Would have been good to understand how a buffer and return pointers etc should work normally, before jumping straight into an overflow

I always wondered just how buffer overflows worked

@davidbombal

11 ай бұрын

Stephen does an amazing job both explaining the theory and practically demonstrating this :)

@lumikarhu

11 ай бұрын

bro i first stumbled upon tutorials about buffer overflows when i was a kid sometime in late 90s. It was explained in every possible way ever since because it's like a gateway to reverse engineering. And I was late to the party already, when I started being 8 years old, people already were presenting tutorials about buffer, stack and heap overflows in popular applications and teaching making exploits. Where's the rock you've been living under? Don't underestimate your abilities to google. You can learn everything by googling. David is nice at explaining things but do your homework on your own once in a while if you ever wanna learn anything, you'll thank me later. Good luck!

👍👍!

@davidbombal

11 ай бұрын

Thank you!

Deved good

you wrote that bot for tibia?!

😎👍

And where is that "link below"?

Buffer overflow exploit

🎉👍🏻

I'm from Kenya can you teach me ethical hacking please

Sir need your help I want to scam back scamer

❤❤❤❤❤🎉

Third

@davidbombal

11 ай бұрын

Thank you for watching!

@PirateSimulator

11 ай бұрын

@@davidbombal UR MY FAV KZreadR AND YOU COMMENTED FOR THE FIRST TIME😭😭😭

@PirateSimulator

11 ай бұрын

@@davidbombal I LOVE YOU

Rare wubbox

first

@davidbombal

11 ай бұрын

Thank you for your support!

I have answer . How to fix kali linux network problem it says ( network manager not running ) plss help me ❤

i am first pin pls

@davidbombal

11 ай бұрын

I pin my comment to help people find the relevant information.

WiFi is not showing in parrot os ?? Any sol.

give him reminder to ON his ASLR

Hi @davidbombal what laptop do you have and where can I get one window 11

@WAFEYYQQ

11 ай бұрын

Also btw your videos are jam packed with education and the best ! And it’s a breeze to understand

Tried to replicate but gets is removed, only fgets works (nvm it still makes a vuln file, just a warning)