Exploiting Stack Buffer Overflows
Methodology for discovering and exploiting stack-based buffer overflows in native...
Install
npx skills add xalgorix/xalgorix --skill exploiting-stack-buffer-overflows -g -a claude-code -y- Repository
- xalgorix/xalgorix1.3k
- Category
- Security
- Updated
- 6d ago
- License
- Apache-2.0
- Context cost
- Mediumabout 2,440 tokens
- Runs scripts
- No, instructions only
What it does
Methodology for discovering and exploiting stack-based buffer overflows in native binaries during authorized engagements, covering crash triage, offset discovery with De Bruijn patterns, control of the saved return address, and escalation paths (ret2win, stack shellcode, ROP) depending on which mitigations are present.
Exploiting Stack Buffer Overflows
When to Use
- During authorized binary exploitation assessments, CTF-style engagements, or vulnerability research where a native program (ELF/PE) copies attacker-controlled data onto the stack without bounds checking.
- When a target uses unsafe functions such as
strcpy,strcat,sprintf,gets, or misuses length-taking functions likefgets,read,memcpy, orsscanfwith an unbounded%s. - When a service crashes with a
Segmentation Faultafter large input, and you need to determine whether the saved return address (EIP/RIP) is controllable. - As the entry-point methodology that feeds into ret2win, stack shellcode, ret2libc, ret2syscall, and ROP techniques.
