Why Pick sudo as Research Target? | Ep. 01

Channel:
United States LiveOverflow
Subscribers:
920,000
Published on ● Video Link: https://www.youtube.com/watch?v=uj1FTiczJSE


Duration: 14:57
44,463 views
3,201

Recently a serious vulnerability in sudo was announced. But how can people even find these kind of bugs? Let's talk about why we would want to look for vulnerabilities in sudo, and how we could do that. We then try to setup afl, but fail... well... this will take a while

https://liveoverflow.com/support

Text Version: https://liveoverflow.com/why-pick-sudo-research-target-part-1/
GitHub: https://github.com/LiveOverflow/pwnedit/tree/main/episode01
Full Playlist: https://www.youtube.com/playlist?list=PLhixgUqwRTjy0gMuT4C3bmjeZjuNQyqdx

Episode 01:
00:00 - Intro
01:48 - Prepare the System
03:57 - How to Pick a Research Target?
05:57 - Choose the Strategy: Fuzzing
09:27 - Fuzzing argv[] With AFL
13:00 - Running Into the Next AFL Problem
14:51 - Outro

-=[ ❤️ Support ]=-

→ per Video: https://www.patreon.com/join/liveoverflow
→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

-=[ 🐕 Social ]=-

→ Twitter: https://twitter.com/LiveOverflow/
→ Website: https://liveoverflow.com/
→ Subreddit: https://www.reddit.com/r/LiveOverflow/
→ Facebook: https://www.facebook.com/LiveOverflow/



Other Videos By LiveOverflow


2021-07-17Crazy Steam Phishing Page
2021-07-10What is a Browser Security Sandbox?! (Learn to Hack Firefox)
2021-07-02Root Cause Analysis With AddressSanitizer (ASan) | Ep. 06
2021-06-25Found a Crash Through Fuzzing? Minimize AFL Testcases! | Ep. 05
2021-06-18Understand Security Risk vs. Security Vulnerability!
2021-06-11Finding Buffer Overflow with Fuzzing | Ep. 04
2021-06-04Hacker Culture Meritocracy?
2021-05-22Troubleshooting AFL Fuzzing Problems | Ep. 03
2021-05-15Pentesting vs. Bug Bounty vs. Pentesting ???
2021-05-08How Fuzzing with AFL works! | Ep. 02
2021-04-29Why Pick sudo as Research Target? | Ep. 01
2021-04-22How SUDO on Linux was HACKED! // CVE-2021-3156
2021-04-15How To Protect Your Linux Server From Hackers!
2021-04-07Running Out Of Hacking Video Ideas
2021-04-05New Challenges Released for CSCG 2021 (including mine) #shorts
2021-04-01Security YouTuber Drama...
2021-03-17Hacking into Google's Network for $133,337
2021-03-03Start of Cyber Security Challenge Germany 2021 #shorts
2021-02-25Format String Exploit Troubleshooting Over Twitter - bin 0x11 b
2021-02-14How CPUs Access Hardware - Another SerenityOS Exploit
2021-02-05Does Hacking Require Programming Skills?


Tags:
Live Overflow
liveoverflow
hacking tutorial
how to hack
exploit tutorial
sudo
CVE-2021-3156
Sudo Baron Samedit
pwnedit
security research
binary exploitation
afl
fuzzing
afl++
aflplusplus
fuzzer
argv
linux