Exploit Sandbox · Virtual Labs · AquinTutor

← LABS Exploit Sandbox STACK OVERFLOW · RET2WIN · SIMULATED Educational simulator — no real memory is touched.

Target binary

Buffer size 16 Copy uses

Mitigations

Stack canary (-fstack-protector) NX / DEP (non-exec stack) ASLR (randomise addresses)

Scenarios

Payload builder

Padding (junk bytes before the overwrite) 0 Overwrite return address with Include leaked canary in payload

Payload bytes

A stack canary is a random value placed before the return address; if an overflow changes it, the program aborts before returning. NX marks the stack non-executable, defeating shellcode-on-stack (so attackers reuse existing code — ret2win/ROP). ASLR randomises addresses, so you need an info-leak first. Defeating all three in sequence is the real skill.