Simple stack buffer overflow server

This simple C program (main.c) expose a stack injection vulnerablity. This program can also be run as a TCP server using the make serve_vulnerability command.

Goal

The main goal of this challenge is to run arbitrary code (a shellcode f.e) on the server's host machine exploiting the stack buffer overflow vulnerability.

A further goal is to write a Metasploit exploit to automate the vulnerability exploitation.

Useful ressources

Stack buffer overflow (Wikipedia)
Buffer overflow exploit
Classic Buffer overflow exploits on Linux x64
Protections against buffer overflow exploits in Linux
Generating Alphanumeric Shellcode with Metasploit
Writing an exploit for Metasploit

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!