Python Penetration Testing Cookbook

How to do it...

Follow the steps to generate an exploit code for buffer overflow attacks in Linux environment:

1. We have to create a vulnerable application for the test. Create a bof.c file and add the following code:

#include <stdio.h>  
void secretFunction() 
{ 
printf("Congratulations!\n"); 
printf("You have entered in the secret function!\n"); 
}  
void echo() 
{ 
char buffer[20];  
printf("Enter some text:\n"); 
scanf("%s", buffer); 
printf("You entered: %s\n", buffer); 
}  
int main() 
{ 
echo(); 
return 0; 
} 

2. Compile it as follows:

gcc bof.c -w -g -Wno-format -Wno-format-security -fno-stack-protector -z norelro -z execstack -o bof
  

3. We can run the following application test:

./bof  

4. We can run objdumb:

objdump -d bof  

From that we can get the memory ...