BOF Win64 issue - Printable Version

BOF Win64 issue - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: BOF Win64 issue (/showthread.php?tid=5927327)

BOF Win64 issue - emadaldin1 - Jan 8, 2019

Here is the bof program

Code 
#include <string.h>

void do_something(char *Buffer)

{

     char MyVar[8];

     strcpy(MyVar,Buffer);

}

int main (int argc, char **argv)

{

     do_something(argv[1]);

}

being learning about bof but got stuck here
tried to insert the address in hex but it kept reading it as asci like EX: AAAAAAAABBBB/*55/*99..
Can someone overwrite the EIP address in here making it point to another location of my choice
thanks
Ironic enough after 5 hours I solved it but you could think of it as challenge to overwrite the EIP in this program

RE: BOF Win64 issue - Nomad.Null - Jan 8, 2019

(Jan 8, 2019 02:09 AM)emadaldin1 Wrote: Here is the bof program

Code
#include <string.h> void do_something(char *Buffer) { char MyVar[8]; strcpy(MyVar,Buffer); } int main (int argc, char **argv) { do_something(argv[1]); }
being learning about bof but got stuck here
tried to insert the address in hex but it kept reading it as asci like EX: AAAAAAAABBBB/*55/*99..
Can someone overwrite the EIP address in here making it point to another location of my choice
thanks
Ironic enough after 5 hours I solved it but you could think of it as challenge to overwrite the EIP in this program

I would expect 5 hours minimum for someone new to stack-based buffer overflows. Congratulations on figuring it out for yourself. If you want to learn more advanced methods on the subject, might I suggest the Corelan Blog. Shellcoder's Handbook and Hacking: The Art of Exploitation are also good books to study it more in-depth.