Other protection mechanisms

Throughout this chapter, we have developed exploits based on stack-based vulnerabilities, and in our journey of exploitation, we bypassed SEH and DEP protection mechanisms. There are many more protection techniques, such as Address Space Layout Randomization (ASLR), stack cookies, SafeSEH, and SEHOP. We will see bypass techniques for these techniques in the upcoming sections of this book. However, these techniques will require an excellent understanding of assembly, opcodes, and debugging.

Important note

Refer to an excellent tutorial on bypassing protection mechanisms at https://www.corelan.be/index.php/2009/09/21/exploit-writing-tutorial-part-6-bypassing-stack-cookies-safeseh-hw-dep-and-aslr/.

You can find more information on bypassing DEP at https://www.corelan.be/index.php/2010/06/16/exploit-writing-tutorial-part-10-chaining-dep-with-rop-the-rubikstm-cube/.

For more information on debugging, refer to http://resources.infosecinstitute.com...