Worth Reading: Mac exploit tutorial

In a tutorial posted on the Offensive Security web site Paul Harrington uses Metasploit and the GNU debugger (GDB) under Mac OS X to demonstrate how to identify a buffer overflow in the Evocam webcam server software and develop an exploit for injecting code. The walkthrough explains how to adapt the code so that suitable registers and memory areas can be overwritten. Harrington also demonstrates how to access system functions despite Apple's protective library randomisation feature.

• Evocam Remote Buffer Overflow on OS X, a tutorial by Paul Harrington.

(crve)