I'm just starting to learn software exploitation (mostly binaries), can I get a few tips?

Question

I don't want to be THAT girl, but the title does say it all. I've just started getting into program exploitation (I love it, so challenging!!), and I want to know I'm starting out on the right foot. I'm currently trying to do a stack overflow exploit on a basic scanf() program that I wrote on my x86_64 Linux Mint pc, using a nop sled and shellcode and then overwriting the instruction pointer to go back and execute my code. I'm just wondering if that's a good start, and any other challenges I should consider

Answer 1

I'd be interested to see a follow up post to learn how this works out for you!

Answer 2

that sounds great! Checkout the liveoverflow Channel auf YouTube. you might Need to Pause various Times, but it's pretty good. for practice: overthewire is great to start!! especially the 'narnia' series, that might be a perfect fit for you. picoctf has much beginner Challenges (some of them might be too Basic, but its a good practice, and they get Harder each Level); and from Level 3 they are not really easy anymore. If you have question, you can dm me :)

Answer 3

Check out the computerphile video on stack overflows if you are interested in it. Good demonstration of what is happening on the low level.

Answer 4

exploit wifi