Other protection mechanisms

Throughout this chapter, we developed exploits based on stack-based vulnerabilities and in our journey of exploitation, we bypassed SEH and DEP protection mechanisms. There are many more protection techniques, such as Address Space Layout Randomization (ASLR), stack cookies, SafeSEH, SEHOP, and many others. We will see bypass techniques for these techniques in the upcoming sections of the book. However, these techniques will require an excellent understanding of assembly, opcodes, and debugging.

Refer to an excellent tutorial on bypassing protection mechanisms at: https://www.corelan.be/index.php/2009/09/21/exploit-writing-tutorial-part-6-bypassing-stack-cookies-safeseh-hw-dep-and-aslr/. For more information on ...

Get Mastering Metasploit - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.