Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…

Buffer Overflow Tutorial for Beginners and new CTF players

0
Medium
Published: 06/24/2026 (06/24/2026, 22:46:55 UTC)
Source: Reddit ExploitDev

Description

Buffer Overflow Tutorial for Beginners and new CTF players Source: https://www.linkedin.com/company/center-for-cyber-security-training-llc/

Reddit Discussion

r/ExploitDev·posted by u/AdvisorPowerful9769
00

If you are new to the world of exploit development and need a solid entry level challenge this week we look at "bof". This is a binary challenge hosted on pwnable[.]kr covering the topic of a Buffer Overflow.

This is what many consider to be their first exploit type written (it was mine), and this particular challenge approaches it in a way you will truly understand how to adapt to situations in which the buffer overflow is not necessarily "vanilla" exploitation.

By the end of this tutorial you should have:

- Learned how to exploit a Buffer Overflow, WITHOUT OVERWRITING THE RETURN ADDRESS!!!
- Learned how to use GDB (raw)
- Learned the basics of hook stops within GDB
- Learned how to approach a CTF challenge with speed or precision (or both depends on what you decide)
- Learned how to find offsets that are small and don't require the use of tooling such as pattern_offset

I wanna thank Center for Cyber Security Training for continuing to help sponsor the channel and their support.

You can find the video here:

https://youtu.be/A-P2bhxzK1Y?si=CcKd2lAZysRaCfCD

Technical Details

Source Type
reddit
Subreddit
ExploitDev+pwned+hacking
Reddit Score
0
Discussion Level
minimal
Content Source
reddit_link_post
Post Type
link
Domain
null
Newsworthiness Assessment
{"score":20,"reasons":["external_link","newsworthy_keywords:buffer overflow","non_newsworthy_keywords:tutorial,beginner","established_author","very_recent"],"isNewsworthy":true,"foundNewsworthy":["buffer overflow"],"foundNonNewsworthy":["tutorial","beginner"]}
Has External Source
true
Trusted Domain
false

Threat ID: 6a3c61ae4853345fc1f85dcd

Added to database: 06/24/2026, 23:01:02 UTC

Last updated: 06/24/2026, 23:01:02 UTC

Views: 1

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses