00:00 - vulnserver intro
02:38 - env setup
04:44 - vulnserver commands
05:43 - ImmunityDebugger
09:23 - spiking
13:26 - analyzing fuzzed TCP packet via WireShark
14:13 - fuzzing using pwntools
20:41 - eip control
28:27 - payload place
29:49 - eip without NX bit, ASLR found via !mona
33:04 - ret2libc
39:50 - breakpoint on EIP at essfunc.dll
43:30 - payload generation
47:10 - not enough space for payload. Need NOPs
50:50 - received TCP reverse shell but lets verify that payload needs space for decode
52:31 - exploiting against vulnserver

Music: https://www.youtube.com/watch?v=Z-VfaG9ZN_U

Follow me:
https://www.linkedin.com/in/novitoll
https://t.me/novitoll_ch

Donate:
https://www.donationalerts.com/r/novitoll