Throughout this chapter, we developed exploits based on stack-based vulnerabilities and in our journey of exploitation, we bypassed SEH and DEP protection mechanisms. There are many more protection techniques, such as Address Space Layout Randomization (ASLR), stack cookies, SafeSEH, SEHOP, and many others. We will see bypass techniques for these techniques in the upcoming sections of the book. However, these techniques will require an excellent understanding of assembly, opcodes, and debugging.
Refer to an excellent tutorial on bypassing protection mechanisms at: https://www.corelan.be/index.php/2009/09/21/exploit-writing-tutorial-part-6-bypassing-stack-cookies-safeseh-hw-dep-and-aslr/.
For more information on debugging, refer to: http://resources.infosecinstitute.com/debugging-fundamentals-for-exploit-development/.
For more information on debugging, refer to: http://resources.infosecinstitute.com/debugging-fundamentals-for-exploit-development/.
