Binary Exploitation: A Practical Guide to Memory, Buffers, and Control Flow

Binary exploitation can sound complicated when you first encounter words such as stack frames, registers, return addresses, heap corruption, and shellcode.

The underlying idea is much simpler:

Binary exploitation is the study of what happens when a program handles memory incorrectly, and how those mistakes can change the program’s behavior.

A vulnerability might allow an attacker to:

• crash a program
• change important data
• bypass a security check
• read information they should not be able to access
• change the program’s control flow
• potentially execute unintended code

The foundation for understanding these vulnerabilities is memory.

1. How a Program Uses Memory

When a program runs, it needs memory to store information.

A simplified process might look like:

PROCESS
                       |
        +--------------+--------------+
        |              |              |
     Code/Data       Stack          Heap
        |              |              |
   Program logic   Function data   Dynamic data

This is a simplified model. Modern operating systems use more complex memory layouts and security mechanisms, but it is useful…