Luigi Auriemma

HI,

I am a M.Sc student at HUT (TKK), Finland. I am working on VLC player vulnerabilities for the hacking course.

I have seen your post on the buffer overflow problems of VLC player.

I need to know how can I exploit it to make it more severe. You said I can execute my own codes via the subtitle file.

In windows system, can you explain me how can I gather some important information using that file, with an example code if possible.

Thanks
Kashif

well, basically you should download my vlcboffs proof-of-concept, edit vlcbof.ssa adding two things:
- the return address for jumping to the shellcode (for example the usual address of a JMP ESP)
- a shellcode, better if alphanumeric

so the usual "technique".
if you need I can also create an example and commenting it a bit