Hi All,
This is just a write up about Word List Builder Buffer Overflow.
If you’re not familiar with Buffer Overflow please read those tutorials:
Exploit writing tutorial part 1 : Stack Based Overflows
Exploit writing tutorial part 3 : SEH Based Exploits
Exploit writing tutorial part 1 : Stack Based Overflows
Exploit writing tutorial part 3 : SEH Based Exploits
Triggering the vulnerability:
Well, opening an invalid (.dic) file will cause the overflow.
Now we have to find “next SEH” & “SEH” offset.
Run: !pvefindaddr suggest