Uploaded December 2021 | Updated September 2026, 2 weeks ago

---

We are still looking for an exploit strategy for the sudo heap overflow. In this episode we look at a few crashes and decide to look into one particular case more deeply.

LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-sudoedit/developing-the-sudo-exploit
Join the Hextree Discord: discord.gg/xgQpCQCpvy

Complete Playlist: youtube.com/playlist?list=PLhixgUqwRTjy0gMuT4C3bmjeZjuNQyqdx
Grab the files: github.com/LiveOverflow/pwnedit (sorry, repo is a bit behind the videos)

Homework libc source code: elixir.bootlin.com/glibc/glibc-2.31/source

Episode 13:

CHAPTERS
00:00 - Intro
00:36 - Recap of Episode 12
01:16 - Interpret Fuzzing Results | fengshui3
03:05 - Reproduction Script poc.py
04:16 - Heap Object Information not Useful
05:10 - Collect More Data on Crashes | fengshui4
05:32 - Looking at Crashes
06:35 - Intersting Crash in nss_lookup_function
07:00 - Homework

SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com

WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog

#CyberSecurity #LiveOverflow

(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.