Search icon CANCEL
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
The Complete Metasploit Guide

You're reading from   The Complete Metasploit Guide Explore effective penetration testing techniques with Metasploit

Arrow left icon
Product type Course
Published in Jun 2019
Publisher Packt
ISBN-13 9781838822477
Length 660 pages
Edition 1st Edition
Languages
Arrow right icon
Authors (2):
Arrow left icon
Sagar Rahalkar Sagar Rahalkar
Author Profile Icon Sagar Rahalkar
Sagar Rahalkar
Nipun Jaswal Nipun Jaswal
Author Profile Icon Nipun Jaswal
Nipun Jaswal
Arrow right icon
View More author details
Toc

Table of Contents (28) Chapters Close

Title Page
Copyright About Packt Contributors Preface 1. Introduction to Metasploit and Supporting Tools FREE CHAPTER 2. Setting up Your Environment 3. Metasploit Components and Environment Configuration 4. Information Gathering with Metasploit 5. Vulnerability Hunting with Metasploit 6. Client-side Attacks with Metasploit 7. Web Application Scanning with Metasploit 8. Antivirus Evasion and Anti-Forensics 9. Cyber Attack Management with Armitage 10. Extending Metasploit and Exploit Development 11. Approaching a Penetration Test Using Metasploit 12. Reinventing Metasploit 13. The Exploit Formulation Process 14. Porting Exploits 15. Testing Services with Metasploit 16. Virtual Test Grounds and Staging 17. Client-Side Exploitation 18. Metasploit Extended 19. Evasion with Metasploit 20. Metasploit for Secret Agents 21. Visualizing with Armitage 22. Tips and Tricks 1. Other Books You May Enjoy

Exploiting SEH-based buffer overflows with Metasploit

Exception handlers are code modules that catch exceptions and errors generated during the execution of the program. This allows the program to continue execution instead of crashing. Windows operating systems have default exception handlers, and we see them generally when an application crashes and throws a pop-up that says XYZ program has encountered an error and needed to close. When the program generates an exception, the equivalent address of the catch code is loaded and called from the stack. However, if we somehow manage to overwrite the address in the stack for the catch code of the handler, we will be able to control the application. Let's see how things are arranged in a stack when an application is implemented with exception handlers:

In the preceding diagram, we can see that we have the address of the catch...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at €18.99/month. Cancel anytime