Discussing Heap Exploit Strategies for sudo - Ep. 09

Channel:
United States LiveOverflow
Subscribers:
920,000
Published on ● Video Link: https://www.youtube.com/watch?v=c2Qi7traPls


Category:
Discussion
Duration: 8:43
28,878 views
1,456

We have a heap buffer overflow, but how can we exploit this now? Let's discuss some of the possible strategies.

Grab the files: https://github.com/LiveOverflow/pwnedit

We made the thumbnail together on stream: https://www.youtube.com/watch?v=71h-AqXut7A

Episode 09:
00:00 - Intro
00:35 - Option 1: Exploit Heap Metadata
02:42 - Option 2: Exploit Data on Heap
04:18 - Heap Feng Shui
06:04 - Failure...?
07:04 - We Could Fuzz the Heap
08:08 - To Be Continued...

-=[ ❤️ Support ]=-

→ per Video: https://www.patreon.com/join/liveoverflow
→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

-=[ 🐕 Social ]=-

→ Twitter: https://twitter.com/LiveOverflow/
→ Website: https://liveoverflow.com/
→ Subreddit: https://www.reddit.com/r/LiveOverflow/
→ Facebook: https://www.facebook.com/LiveOverflow/



Other Videos By LiveOverflow


2021-12-14Can We Find a New Exploit Strategy? | Ep. 13
2021-12-02Authorization vs. Authentication (Google Bug Bounty)
2021-11-18Developing GDB Extension for Heap Exploitation | Ep. 12
2021-11-04How Hackers Get Into Every Device!
2021-10-26Design Flaw in Security Product - ALLES! CTF 2021
2021-10-17Fuzzing Heap Layout to Overflow Function Pointers | Ep. 11
2021-10-06Video Essay about the Security Creator Scene
2021-09-26Did you really find a vulnerability in Google? - ft. @PwnFunction
2021-09-19Developing a Tool to Find Function Pointers on The Heap | Ep. 10
2021-09-12What Ethereum Smart Contract Hacking Looks Like
2021-09-04Discussing Heap Exploit Strategies for sudo - Ep. 09
2021-08-28"Controversial Security" // BSides Berlin 2021
2021-08-26using z3 to reverse a custom hash during a CTF be like #shorts
2021-08-19can you hack this screenshot service?? - CSCG 2021
2021-08-11C Code Review - Reaching Vulnerable Code in sudo | Ep. 08
2021-07-31DO NOT USE alert(1) for XSS
2021-07-24Understanding C Pointer Magic Arithmetic | Ep. 07
2021-07-17Crazy Steam Phishing Page
2021-07-10What is a Browser Security Sandbox?! (Learn to Hack Firefox)
2021-07-02Root Cause Analysis With AddressSanitizer (ASan) | Ep. 06
2021-06-25Found a Crash Through Fuzzing? Minimize AFL Testcases! | Ep. 05


Tags:
Live Overflow
liveoverflow
hacking tutorial
how to hack
exploit tutorial
sudo
pwnedit
heap overflow
heap exploitation
dlmalloc
malloc
free
heap exploit
buffer overflow
exploit strategy
heap metadata
overwrite
baron samedit