Скачать или смотреть 16-Stack Guards (aka Stack Cookies) and HowTo Bypass them using SEH

In this video we recompile our test2.c application to use Stack Guards /GS (aka Stack Cookies) to protect our application's stack. We then debug the application and see how it checks for the cookie and how it terminates the application if anything is wrong with the cookie by calling __fastfail with INT 0x29. Finally we re-exploit the application by triggering an exception and using the SEH to bypass the whole Stack Guard protection.

Please note /GS is a Microsoft VS Compiler buffer overrun mitigation technique. More details could be found here: https://docs.microsoft.com/en-us/cpp/...

For more info about "INT 0x29" being called and why it being called, please read more here: https://docs.microsoft.com/en-us/cpp/...