Pwntools & GDB for Buffer Overflow w/ Arguments (PicoCTF 2022 #43 'buffer-overflow2')

Help the channel grow with a Like, Comment, & Subscribe!
Check out the affiliates below for more free or discounted learning!

📧Contact me! (I may be very slow to respond or completely unable to)

[FurikuriYugi]

Don't be sorry. It is important for people that are new to programing to see that despite how talented and or expierenced one is that we stil can get stumbled up on things even if it is a miss spelling that can eat away hours of your time.

Great job as always and thank you.

[JohnSmith-eqbw]

I'm trying to get started in the infosec field after completing an unrelated undergraduate degree. It's fascinating stuff, but it's very easy to get discouraged. Seeing John encounter difficulties and work around them is inspirational. If a seasoned pro has a hard time with PicoCTF, that makes me feel a lot better about having a tough time applying the theory I'm learning.

[drewzilla]

Nothing to be sorry about, John. The topic of these videos require a longer video. I love working along on these with you and I feel good when I figure things out around the same time you do, or at least I understand what you're talking about. It means I learned well form your videos so far. Thank you!

[artemis-arrow]

I'm currently learning exploit development, ur vids r rly helpful man, they give me a general idea for such things

[__hetz]

I take a stab at Advent of Code every year, usually hitting the wall a bit over halfway through, and all I wanted last year was to make it on a leaderboard for the first time. I knew I'd have to do it with the easiest challenges in the first week, and it eventually happened to where I had "completed" a challenge fast enough that I would've finally made it. I was done and working in under two minutes... or I would have been except I had that same + instead of += typo on a line. It took me another 30 minutes of trying to find nonexistent bugs like index errors or off-by-ones before I realized the problem.... so maybe this year will be the year instead.

As others have said don't beat yourself up over it because it happens to the best of us. At the same time showing these occasional struggles over simple oversights greatly humanizes the process. It reminds us that even professionals can tunnel vision themselves away from a solution that was firmly in their grasp.

Keep up the awesome work, John!

[_hackwell]

thanks for the video! it'll help a lot for the upcoming cyber apocalypse

[themadichibd]

Super cool, hadnt seen pwntools or gef before this, but I love how clean that exploit script looks once it was done.

[Whyineedachannelname]

Thanks for all the work you do it's very educative can't wait to see the next one

[FunkadelicFeed]

Seeing you struggle was so inspiring and encouraging. If you also have trouble sometimes then it's okay for me to struggle with almost all of the challenges 🤣

[_AN]

Pwn tools seems to be targeting walk throughs which is hell helpful !!

[HAGSLAB]

I'm sure John knows this and is just using argparse manually to learn and teach. But, for anyone interested, `pwn template` actually gives you a template for your exploit including local/remote support.

[kostyatitovsky]

Hello, John! Read about subparser for argparse ;)

[xSebin]

John please do more videos related to Buffer overflow ...

[KaliMax]

John, these are great vids- thanks! just starting out and really like rev eng but aside from CTF's, how is this an in demand skill for the real world?

[oliverthomas]

Hi John, thanks for another great video!
I have a question about reading the value of ebp, when you have set it to cafef00d. I know the ebp+0x8 is cafec00d but when I do the
"x $ebp+0x8" it prints "\r\360\376\312\r\360\003". Why is that? 🙂

[redspotaquashrimps]

Very cool! How many hours you spend per day doing this stuff before you know what you're doing from daily work to late night I suppose? :)

[ani-zxk]

dude i did pretty much the exact same thing, i dont understand that when i put the address of win it would jump there and anything following that would just get moved into the eip register preventing me from stepping through win.

[frxnk]

I don’t know Seth Rogan was in infosec

[bhagyalakshmi]

Integer value given?
Integer over /underflow what tlime.

[gothops]

44:58 armchair programming here, but (not x OR no y) is just (x AND y)