Friday, April 1, 2011

Word List Builder Buffer Overflow Write-Up

     Hi All,
 This is just a write up about Word List Builder Buffer Overflow.
 If you’re not familiar with Buffer Overflow please read those tutorials:
Exploit writing tutorial part 1 : Stack Based Overflows
Exploit writing tutorial part 3 : SEH Based Exploits

     Triggering the vulnerability:

     Well, opening an invalid (.dic) file will cause the overflow.
 Now we have to find “next SEH” & “SEH” offset.
 Run: !pvefindaddr suggest