Automatic exploitation video from BSides DC

This YouTube video is titled “Lightening fast CTF solving – Automatic Exploit Generation & Side Channel Analysis” was sent to me by Sketch from this year’s BSides DC. It shows how to automate exploitation for stack overflows and format string vulnerabilities and the tool suite is built on top of the “angr” framework, Intel’s Pin framework and the “pwntools” package for Python. At the tail end of the video he actually applies this tool suite against a NETGEAR SOHO router which not only finds the vulnerability but will actually exploit it remotely and discusses how it can be used to identify and exploit these vulnerabilities in IoT devices.

http://bit.ly/2VUDfPy

I have already taken the liberty of forking all of his GitHub repositories and you can find them here:

* Zeratool: http://bit.ly/2u8hBet
* PinCTF: http://bit.ly/2u4Od98
* Rocket-Shot: http://bit.ly/2u1gYnd