00:00 - vulnserver intro
02:38 - env setup
04:44 - vulnserver commands
05:43 - ImmunityDebugger
09:23 - spiking
13:26 - analyzing fuzzed TCP packet via WireShark
14:13 - fuzzing using pwntools
20:41 - eip control
28:27 - payload place
29:49 - eip without NX bit, ASLR found via !mona
33:04 - ret2libc
39:50 - breakpoint on EIP at essfunc.dll
43:30 - payload generation
47:10 - not enough space for payload. Need NOPs
50:50 - received TCP reverse shell but lets verify that payload needs space for decode
52:31 - exploiting against vulnserver

Music: https://www.youtube.com/watch?v=Z-VfaG9ZN_U

Follow me:
https://www.linkedin.com/in/novitoll
https://t.me/novitoll_ch

Donate:
https://www.donationalerts.com/r/novitoll

Вводное в Линукс процессы, task_struct и тд., теоритическая составляющая, что нам понадобится при практической работе с Линукс ядром.

https://www.cs.columbia.edu/~junfeng/10sp-w4118/lectures/l07-proc-linux.pdf

0:33 - Полезные Twitter
2:40 - l07-proc-linux.pdf
3:18 - Processor ID
5:05 - task_struct, thread_info, kernel stack, task queues
5:50 - Linux process address space
6:40 - process-related files & Bootlin navigation
7:27 - task_struct
10:30 - thread_info, kernel_stack, task_queue
11:11 - process states
13:27 - zombie, orphan processes
14:39 - fork(), COW
16:46 - kernel stack, current_thread_info()
18:54 - runqueue, waitqueue_t
20:38 - context switch (в кратце)
22:07 - зачем это нам нужно?
24:08 - что дальше?

5:28 - сущность `task` :)

P.S.: I do videos on Russian and English, but my audience is mostly Russian-speakers, therefore I record on this language.