Buffer Overflows Shesh Jun 3 09

This document discusses buffer overflow vulnerabilities and exploitation. It defines buffer overflows and outlines steps for detecting vulnerabilities through code review, reverse engineering, and fuzzing applications. It then describes creating a simple fuzzer to test for overflows and analyzing crashes. The document discusses creating a "smart buffer" and calculating the payload size, controlling EIP to jump to shellcode using jmp esp. It mentions using encoders to obfuscate shellcode and using a NOP sled to increase reliability of the exploit. The overall document provides an introduction and overview of developing a buffer overflow exploit.