Discussing Heap Exploit Strategies for sudo

2021-09-04

[public] 17.7K views, 1.47K likes, 12.0 dislikes audio only

We have a heap buffer overflow, but how can we exploit this now? Let's discuss some of the possible strategies.

Grab the files: https://github.com/LiveOverflow/pwnedit

We made the thumbnail together on stream: https://www.youtube.com/watch?v=71h-AqXut7A

Episode 09:

00:00 - Intro

00:35 - Option 1: Exploit Heap Metadata

02:42 - Option 2: Exploit Data on Heap

04:18 - Heap Feng Shui

06:04 - Failure...?

07:04 - We Could Fuzz the Heap

08:08 - To Be Continued...

-=[ ❤️ Support ]=-

→ per Video: https://www.patreon.com/join/liveoverflow

→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

-=[ 🐕 Social ]=-

→ Twitter: https://twitter.com/LiveOverflow/

→ Website: https://liveoverflow.com/

→ Subreddit: https://www.reddit.com/r/LiveOverflow/

→ Facebook: https://www.facebook.com/LiveOverflow/