{"id":3141,"date":"2023-08-08T11:00:00","date_gmt":"2023-08-08T09:00:00","guid":{"rendered":"https:\/\/hardsoftsecurity.es\/?p=3141"},"modified":"2023-09-06T13:28:28","modified_gmt":"2023-09-06T11:28:28","slug":"buffer-overflow-como-funcionan-thm","status":"publish","type":"post","link":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/","title":{"rendered":"Buffer Overflow \u00bfC\u00f3mo Funcionan? &#8211; THM"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">El buffer overflow ha sido durante mucho tiempo una de las vulnerabilidades m\u00e1s conocidas y explotadas en el mundo de la ciberseguridad. A pesar de las protecciones modernas, entender c\u00f3mo funciona un buffer overflow es fundamental para cualquier profesional de seguridad ofensiva. En este post, exploraremos los pilares y terminolog\u00eda esenciales para desmitificar este complejo tema.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" fetchpriority=\"high\" decoding=\"async\" width=\"800\" height=\"420\" data-attachment-id=\"3142\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/image-62\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image.png?fit=1800%2C945&amp;ssl=1\" data-orig-size=\"1800,945\" data-comments-opened=\"1\" data-image-title=\"image\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image.png?fit=800%2C420&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image.png?resize=800%2C420&#038;ssl=1\" alt=\"Buffer Overflow Attacks\" class=\"wp-image-3142\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image.png?w=1800&amp;ssl=1 1800w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image.png?resize=300%2C158&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image.png?resize=768%2C403&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image.png?resize=1536%2C806&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image.png?w=1600&amp;ssl=1 1600w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<!--more-->\n\n\n\n<h4 class=\"wp-block-heading\"><strong>1. \u00bfQu\u00e9 es un Buffer Overflow?<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Un &#8220;buffer overflow&#8221; es b\u00e1sicamente como intentar verter m\u00e1s agua en una botella de la que puede contener. Si contin\u00faas vertiendo, el agua se desbordar\u00e1 y afectar\u00e1 a las \u00e1reas circundantes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">En el contexto de la programaci\u00f3n, un buffer es una regi\u00f3n de la memoria que se asigna para contener datos temporales. Si escribes m\u00e1s datos en el buffer de los que puede contener, los datos adicionales se desbordan en las regiones adyacentes de la memoria.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Esto puede resultar en un comportamiento impredecible, como la corrupci\u00f3n de datos y, a veces, puede ser explotado para ejecutar c\u00f3digo arbitrario.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>char buffer&#91;10];\nstrcpy(buffer, \"This text is too long!\");<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">En este ejemplo, la cadena es demasiado larga para el buffer, lo que puede causar un overflow.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>2. Los Pilares del Buffer Overflow<\/strong><\/h4>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>a. Fuzzing<\/strong><\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Fuzzing es el proceso de enviar datos inesperados a una aplicaci\u00f3n para descubrir c\u00f3mo responde. Es como probar la resistencia de un puente lanz\u00e1ndole todo tipo de cosas.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>b. Control del EIP (Instruction Pointer)<\/strong><\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Si puedes controlar EIP, puedes controlar la ejecuci\u00f3n del programa. Esto se logra encontrando el n\u00famero exacto de bytes necesarios para sobrescribir el EIP.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>c. Identificaci\u00f3n de Caracteres Problem\u00e1ticos<\/strong><\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Algunos caracteres pueden romper tu explotaci\u00f3n. La identificaci\u00f3n de estos &#8220;caracteres malos&#8221; es esencial para una explotaci\u00f3n exitosa.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>d. Encontrar un Punto de Salto<\/strong><\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Necesitas encontrar un lugar en la memoria para saltar a tu shellcode. Esto a menudo se logra con instrucciones JMP o CALL.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>3. Herramientas Esenciales<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Immunity Debugger<\/strong>: Un depurador utilizado para analizar c\u00f3mo funciona una aplicaci\u00f3n.<\/li>\n\n\n\n<li><strong>Mona<\/strong>: Un complemento para Immunity que facilita muchas tareas en la explotaci\u00f3n de buffer overflow.<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>4. Protecciones Modernas<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Es importante reconocer que hay protecciones como ASLR y DEP que pueden hacer que la explotaci\u00f3n de un buffer overflow sea mucho m\u00e1s compleja en sistemas modernos.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">5. Explotaci\u00f3n de Buffer Overflow<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Para este caso, vamos a utilizar el path de aprendizaje que nos proporciona <a href=\"https:\/\/tryhackme.com\/room\/bufferoverflowprep\" target=\"_blank\" rel=\"noreferrer noopener\">TryHackMe<\/a> de como explotar este tipo de vulnerabilidades. En este laboratorio tendremos 10 diferentes versiones del mismo software que deberemos explotar. Este laboratorio tambi\u00e9n es utilizado para la preparaci\u00f3n de como explotar Buffer Overflow de cara a la certificaci\u00f3n eCPPTv2. En este caso en este post solamente vamos a ense\u00f1ar la primera explotaci\u00f3n, en siguientes post veremos como se explotar\u00e1 el resto. A continuaci\u00f3n, os dejo el v\u00eddeo de la explotaci\u00f3n:<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<span class=\"embed-youtube\" style=\"text-align:center; display: block;\"><iframe class=\"youtube-player\" title=\"YouTube video player\" width=\"800\" height=\"450\" src=\"https:\/\/www.youtube.com\/embed?version=3&#038;rel=1&#038;showsearch=0&#038;showinfo=1&#038;iv_load_policy=1&#038;fs=1&#038;hl=es-ES&#038;autohide=2&#038;wmode=transparent&#038;listType=playlist&#038;list=PLlrDD4oTyyiFP2XT7vV7VsbMgPY_xqLTb\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\"><\/iframe><\/span>\n<\/div><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>6. Conclusi\u00f3n<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Explotar este tipo de vulnerabilidad no es una tarea sencilla, pero entender estos pilares es un paso fundamental en el camino para convertirse en un experto en seguridad ofensiva.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Si est\u00e1s interesado en aprender m\u00e1s sobre estos conceptos, te animo a practicar en un entorno controlado y \u00e9tico, y siempre respetar las leyes y regulaciones locales.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">\ud83d\udd12 <strong><a href=\"https:\/\/hardsoftsecurity.es\/\">Hardsoft Security<\/a><\/strong> ofrece servicios de consultor\u00eda en ciberseguridad, asegurando que tu negocio est\u00e9 siempre protegido contra las amenazas m\u00e1s recientes. Y si est\u00e1s buscando un alojamiento que ponga la seguridad primero, <a href=\"https:\/\/securehosting.es\"><strong>Secure Hosting<\/strong> <\/a>es tu soluci\u00f3n ideal. Ayudamos a mantener seguro tu sitio web con las mejores pr\u00e1cicas de ciberseguridad con nuestro asesoramiento en ciberseguridad especializado.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">No esperes a ser el pr\u00f3ximo objetivo. Asegura tu presencia online con las mejores soluciones y servicios del mercado. \u00a1Contacta con <a href=\"https:\/\/hardsoftsecurity.es\/index.php\/contacta-con-nosotros-2\/\"><strong>Hardsoft Security<\/strong> <\/a>y <strong><a href=\"https:\/\/securehosting.es\/1251-2\/\">Secure Hosting<\/a><\/strong> hoy mismo!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>(La ciberseguridad no es un lujo, sino una necesidad. Protege tu inversi\u00f3n y tu reputaci\u00f3n en l\u00ednea.)<\/em>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>El buffer overflow ha sido durante mucho tiempo una de las vulnerabilidades m\u00e1s conocidas y explotadas en el mundo de la ciberseguridad. A pesar de las protecciones modernas, entender c\u00f3mo &#8230;<\/p>\n","protected":false},"author":1,"featured_media":3142,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"Descubre la intrigante vulnerabilidad de buffer overflow en mi \u00faltimo tutorial en YouTube. Utilizando herramientas como Immunity Debugger y Mona, te gu\u00edo a trav\u00e9s de t\u00e9cnicas \u00e9ticas de explotaci\u00f3n. Visita mi blog para m\u00e1s contenido.","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[3,7],"tags":[388,336,401,392,399,393,404,402,400,63,387,398,395,41,403,394,396,391,397,389,390],"class_list":["post-3141","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guias","category-seguridad-informatica","tag-bufferoverflow","tag-ciberseguridad","tag-controleip","tag-depuracion","tag-exploitdevelopment","tag-fuzzing","tag-guiabufferoverflow","tag-hackingetico","tag-hackingpractico","tag-hardsoftsecurity","tag-immunitydebugger","tag-mona","tag-msfvenom","tag-pentesting","tag-proteccionaslr","tag-protecciondep","tag-seguridadinformatica","tag-seguridadofensiva","tag-tecnicasdeexplotacion","tag-tryhackme","tag-vulnerabilidad"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Buffer Overflow \u00bfC\u00f3mo Funcionan? - THM - Hardsoft Security<\/title>\n<meta name=\"description\" content=\"Explora los buffer overflow: gu\u00eda b\u00e1sica sobre este aspecto crucial de la seguridad inform\u00e1tica. \u00a1Descubre m\u00e1s!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Buffer Overflow \u00bfC\u00f3mo Funcionan? - THM - Hardsoft Security\" \/>\n<meta property=\"og:description\" content=\"Explora los buffer overflow: gu\u00eda b\u00e1sica sobre este aspecto crucial de la seguridad inform\u00e1tica. \u00a1Descubre m\u00e1s!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/\" \/>\n<meta property=\"og:site_name\" content=\"Hardsoft Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/HardSoftDavid\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-08T09:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-06T11:28:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1800\" \/>\n\t<meta property=\"og:image:height\" content=\"945\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"david\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:site\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"david\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/08\\\/08\\\/buffer-overflow-como-funcionan-thm\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/08\\\/08\\\/buffer-overflow-como-funcionan-thm\\\/\"},\"author\":{\"name\":\"david\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"headline\":\"Buffer Overflow \u00bfC\u00f3mo Funcionan? &#8211; THM\",\"datePublished\":\"2023-08-08T09:00:00+00:00\",\"dateModified\":\"2023-09-06T11:28:28+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/08\\\/08\\\/buffer-overflow-como-funcionan-thm\\\/\"},\"wordCount\":659,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/08\\\/08\\\/buffer-overflow-como-funcionan-thm\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/image.png?fit=1800%2C945&ssl=1\",\"keywords\":[\"BufferOverflow\",\"Ciberseguridad\",\"ControlEIP\",\"Depuraci\u00f3n\",\"ExploitDevelopment\",\"Fuzzing\",\"Gu\u00edaBufferOverflow\",\"Hacking\u00c9tico\",\"HackingPr\u00e1ctico\",\"hardsoftsecurity\",\"ImmunityDebugger\",\"Mona\",\"msfvenom\",\"pentesting\",\"Protecci\u00f3nASLR\",\"Protecci\u00f3nDEP\",\"SeguridadInform\u00e1tica\",\"SeguridadOfensiva\",\"T\u00e9cnicasDeExplotaci\u00f3n\",\"TryHackMe\",\"Vulnerabilidad\"],\"articleSection\":[\"Gu\u00edas\",\"Seguridad inform\u00e1tica\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/08\\\/08\\\/buffer-overflow-como-funcionan-thm\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/08\\\/08\\\/buffer-overflow-como-funcionan-thm\\\/\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/08\\\/08\\\/buffer-overflow-como-funcionan-thm\\\/\",\"name\":\"Buffer Overflow \u00bfC\u00f3mo Funcionan? - THM - Hardsoft Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/08\\\/08\\\/buffer-overflow-como-funcionan-thm\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/08\\\/08\\\/buffer-overflow-como-funcionan-thm\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/image.png?fit=1800%2C945&ssl=1\",\"datePublished\":\"2023-08-08T09:00:00+00:00\",\"dateModified\":\"2023-09-06T11:28:28+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"description\":\"Explora los buffer overflow: gu\u00eda b\u00e1sica sobre este aspecto crucial de la seguridad inform\u00e1tica. \u00a1Descubre m\u00e1s!\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/08\\\/08\\\/buffer-overflow-como-funcionan-thm\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/08\\\/08\\\/buffer-overflow-como-funcionan-thm\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/08\\\/08\\\/buffer-overflow-como-funcionan-thm\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/image.png?fit=1800%2C945&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/image.png?fit=1800%2C945&ssl=1\",\"width\":1800,\"height\":945},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/08\\\/08\\\/buffer-overflow-como-funcionan-thm\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Buffer Overflow \u00bfC\u00f3mo Funcionan? &#8211; THM\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\",\"name\":\"Hardsoft Security\",\"description\":\"Chasing (In)Security\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/hardsoftsecurity.es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\",\"name\":\"david\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"caption\":\"david\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Buffer Overflow \u00bfC\u00f3mo Funcionan? - THM - Hardsoft Security","description":"Explora los buffer overflow: gu\u00eda b\u00e1sica sobre este aspecto crucial de la seguridad inform\u00e1tica. \u00a1Descubre m\u00e1s!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/","og_locale":"es_ES","og_type":"article","og_title":"Buffer Overflow \u00bfC\u00f3mo Funcionan? - THM - Hardsoft Security","og_description":"Explora los buffer overflow: gu\u00eda b\u00e1sica sobre este aspecto crucial de la seguridad inform\u00e1tica. \u00a1Descubre m\u00e1s!","og_url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/","og_site_name":"Hardsoft Security","article_publisher":"https:\/\/www.facebook.com\/HardSoftDavid","article_published_time":"2023-08-08T09:00:00+00:00","article_modified_time":"2023-09-06T11:28:28+00:00","og_image":[{"width":1800,"height":945,"url":"https:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image.png","type":"image\/png"}],"author":"david","twitter_card":"summary_large_image","twitter_creator":"@DavidDeMaya","twitter_site":"@DavidDeMaya","twitter_misc":{"Escrito por":"david","Tiempo de lectura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/#article","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/"},"author":{"name":"david","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"headline":"Buffer Overflow \u00bfC\u00f3mo Funcionan? &#8211; THM","datePublished":"2023-08-08T09:00:00+00:00","dateModified":"2023-09-06T11:28:28+00:00","mainEntityOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/"},"wordCount":659,"commentCount":0,"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image.png?fit=1800%2C945&ssl=1","keywords":["BufferOverflow","Ciberseguridad","ControlEIP","Depuraci\u00f3n","ExploitDevelopment","Fuzzing","Gu\u00edaBufferOverflow","Hacking\u00c9tico","HackingPr\u00e1ctico","hardsoftsecurity","ImmunityDebugger","Mona","msfvenom","pentesting","Protecci\u00f3nASLR","Protecci\u00f3nDEP","SeguridadInform\u00e1tica","SeguridadOfensiva","T\u00e9cnicasDeExplotaci\u00f3n","TryHackMe","Vulnerabilidad"],"articleSection":["Gu\u00edas","Seguridad inform\u00e1tica"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/","url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/","name":"Buffer Overflow \u00bfC\u00f3mo Funcionan? - THM - Hardsoft Security","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/#primaryimage"},"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image.png?fit=1800%2C945&ssl=1","datePublished":"2023-08-08T09:00:00+00:00","dateModified":"2023-09-06T11:28:28+00:00","author":{"@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"description":"Explora los buffer overflow: gu\u00eda b\u00e1sica sobre este aspecto crucial de la seguridad inform\u00e1tica. \u00a1Descubre m\u00e1s!","breadcrumb":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/#primaryimage","url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image.png?fit=1800%2C945&ssl=1","contentUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image.png?fit=1800%2C945&ssl=1","width":1800,"height":945},{"@type":"BreadcrumbList","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/08\/buffer-overflow-como-funcionan-thm\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/hardsoftsecurity.es\/"},{"@type":"ListItem","position":2,"name":"Buffer Overflow \u00bfC\u00f3mo Funcionan? &#8211; THM"}]},{"@type":"WebSite","@id":"https:\/\/hardsoftsecurity.es\/#website","url":"https:\/\/hardsoftsecurity.es\/","name":"Hardsoft Security","description":"Chasing (In)Security","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hardsoftsecurity.es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a","name":"david","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","caption":"david"}}]}},"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p7xGFx-OF","jetpack-related-posts":[{"id":3583,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/27\/preparar-ecpptv2\/","url_meta":{"origin":3141,"position":0},"title":"\u00bfC\u00f3mo PREPARAR la certificaci\u00f3n eCPPTV2?","author":"david","date":"noviembre 27, 2023","format":false,"excerpt":"Hoy, me complace profundizar en \"\u00bfC\u00f3mo preparar la certificaci\u00f3n eCPPTv2 (Certified Professional Penetration Tester)?\", una credencial que he obtenido recientemente y que ha marcado un punto de inflexi\u00f3n significativo en mi carrera en seguridad inform\u00e1tica. Esta certificaci\u00f3n no solo ha ampliado mi conocimiento t\u00e9cnico sino que tambi\u00e9n ha reforzado mi\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":2696,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2022\/03\/18\/exploiting-buffer-overflow\/","url_meta":{"origin":3141,"position":1},"title":"Exploiting Buffer Overflow Windows","author":"david","date":"marzo 18, 2022","format":false,"excerpt":"Bienvenid@s a tod@s, hoy os traigo un nuevo post al blog. Hoy tratamos un caso pr\u00e1ctico de c\u00f3mo explotar una vulnerabilidad de desbordamiento de b\u00fafer de una aplicaci\u00f3n, en este caso instalada en un Windows 7 de 32 Bits. Software necesario. PCMan FTP Server 2.0.7. Conseguir aqu\u00ed\u00a0exploit-db Immunity Debugger\u00a0aqu\u00ed. mona.py\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":3293,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/09\/07\/empezar-en-ciberseguridad\/","url_meta":{"origin":3141,"position":2},"title":"Empezar en Ciberseguridad: Gu\u00eda para Novatos","author":"david","date":"septiembre 7, 2023","format":false,"excerpt":"La ciberseguridad es un campo en constante evoluci\u00f3n y con una demanda creciente. Si acabas de terminar tus estudios universitarios\/educaci\u00f3n y te preguntas c\u00f3mo comenzar en ciberseguridad, este post (y v\u00eddeo) es para ti. \u00bfQu\u00e9 habilidades t\u00e9cnicas necesito para comenzar en ciberseguridad? M\u00e1s all\u00e1 de lo que hayas aprendido en\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":3638,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/","url_meta":{"origin":3141,"position":3},"title":"\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico.","author":"david","date":"enero 25, 2024","format":false,"excerpt":"\u00a1Hola! Hoy vamos a sumergirnos en el fascinante mundo de SQLMap, una herramienta indispensable para aquellos que se dedican a garantizar la seguridad de las bases de datos y, por supuesto, para los curiosos del pentesting. Imagina tener una navaja suiza que puede detectar y explotar vulnerabilidades en bases de\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":3287,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/09\/06\/seguridad-wordpress-2023-top-10-para-pymes-y-blogueros\/","url_meta":{"origin":3141,"position":4},"title":"Seguridad WordPress 2023: Top 10 para PYMES y Blogueros","author":"david","date":"septiembre 6, 2023","format":false,"excerpt":"En el entorno digital actual, garantizar la seguridad WordPress es esencial, especialmente de cara al 2023. Las amenazas cibern\u00e9ticas son constantes, evolucionan r\u00e1pidamente y tu sitio web puede ser un objetivo. Aqu\u00ed te presentamos medidas esenciales y plugins de seguridad WordPress que todo profesional, ya sea en PYMES o blogueros,\u2026","rel":"","context":"En \u00abInformaci\u00f3n\u00bb","block_context":{"text":"Informaci\u00f3n","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/informacion\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/wordpress.jpg?fit=1200%2C400&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/wordpress.jpg?fit=1200%2C400&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/wordpress.jpg?fit=1200%2C400&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/wordpress.jpg?fit=1200%2C400&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/wordpress.jpg?fit=1200%2C400&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":2810,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2022\/10\/23\/trabajo-de-fin-de-master-ciberseguridad\/","url_meta":{"origin":3141,"position":5},"title":"Trabajo de Fin de M\u00e1ster &#8211; Ciberseguridad","author":"david","date":"octubre 23, 2022","format":false,"excerpt":"Buenas a tod@s, hoy os traigo un post muy interesante, donde voy a mostrar el Trabajo de Fin de M\u00e1ster que he presentado. El trabajo est\u00e1 relacionado con los siguientes \u00e1mbitos Direcci\u00f3n de Ciberseguridad, Hacking \u00c9tico y Seguridad Ofensiva. Introducci\u00f3n Durante los \u00faltimos a\u00f1os, he enfocado mi carrera profesional a\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/10\/anarchy-computer-hack-hacker-wallpaper-preview.jpg?fit=728%2C363&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/10\/anarchy-computer-hack-hacker-wallpaper-preview.jpg?fit=728%2C363&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/10\/anarchy-computer-hack-hacker-wallpaper-preview.jpg?fit=728%2C363&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/10\/anarchy-computer-hack-hacker-wallpaper-preview.jpg?fit=728%2C363&ssl=1&resize=700%2C400 2x"},"classes":[]}],"jetpack_likes_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image.png?fit=1800%2C945&ssl=1","_links":{"self":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/3141","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/comments?post=3141"}],"version-history":[{"count":4,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/3141\/revisions"}],"predecessor-version":[{"id":3304,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/3141\/revisions\/3304"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media\/3142"}],"wp:attachment":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media?parent=3141"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/categories?post=3141"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/tags?post=3141"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}