+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: Software to practice BoF on? (/showthread.php?tid=5427674)
Software to practice BoF on? - Abducted - Oct 8, 2016
Hey lads,
Do you know any vulnerable services I could practice BoF on? Windows preffered.
Thanks in advance!
Cheers, Abducted 🤝
* - phuqer - Oct 8, 2016
Look for the RicohDC DL-10 FTP Server. You need to find 1.1.0.6
It may be hard to find.
Windows 2003 exploit code
Code
http://pastebin.com/0mWdbr27Windows XP exploit code
Code
https://www.exploit-db.com/exploits/18643/* - Abducted - Oct 9, 2016
(Oct 8, 2016 03:56 PM)phuqer Wrote: Look for the RicohDC DL-10 FTP Server. You need to find 1.1.0.6
It may be hard to find.
Windows 2003 exploit code
Codehttp://pastebin.com/0mWdbr27
Windows XP exploit code
Codehttps://www.exploit-db.com/exploits/18643/
Thanks! I'll try exploiting the vulnerability myself!
* - Pyr0 - Oct 9, 2016
(Oct 8, 2016 12:37 PM)Abducted Wrote: Hey lads,
Do you know any vulnerable services I could practice BoF on? Windows preffered.
Thanks in advance!
Cheers, Abducted 🤝
Look into the hacking challenges - I would recommend "Brainpan 2" for this exact thing. The challenge has a buffer overflow in a "msg_root" program that can easily be overflowed and doesn't require knowledge of ALSR/DEP.
* - Abducted - Oct 10, 2016
(Oct 9, 2016 11:51 PM)Pyr0 Wrote: Look into the hacking challenges - I would recommend "Brainpan 2" for this exact thing. The challenge has a buffer overflow in a "msg_root" program that can easily be overflowed and doesn't require knowledge of ALSR/DEP.
Thanks for sharing!
I'm also looking into getting this stuff on my free time.