Uploaded February 2021 | Updated September 2026, 2 weeks ago
When I saw how easy it is for Andreas to find bugs in his own code, and even write exploits for it, I thought about the relationship between hacking and coding skills. And it's not surprising that decades of programming experience can easily transferred to hacking skills!
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-general-education/cybersecurity-jobs
Join the Hextree Discord: discord.gg/xgQpCQCpvy
LiveOverflow Playlists: youtube.com/c/LiveOverflowCTF/playlists
Andreas Kling: youtube.com/channel/UC3ts8coMP645hZw9JSD3pqQ
CHAPTERS
00:00 - Introduction
00:26 - SerenityOS Videos & Andreas Kling
01:12 - Andreas Kling Skills & Career
02:09 - Exploitation Requires Coding!
02:36 - What about Web Hacking?
03:42 - System Exploitation vs. Web Hacking
05:14 - Coding Useless for Web Hacking?!
05:43 - Programming in Different IT Security Jobs?
06:49 - IT Security as Entry-level Position?
07:07 - What's your Programming Experience?
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#BugBounty #Serenityos #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.
When I saw how easy it is for Andreas to find bugs in his own code, and even write exploits for it, I thought about the relationship between hacking and coding skills. And it's not surprising that decades of programming experience can easily transferred to hacking skills!
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-general-education/cybersecurity-jobs
Join the Hextree Discord: discord.gg/xgQpCQCpvy
LiveOverflow Playlists: youtube.com/c/LiveOverflowCTF/playlists
Andreas Kling: youtube.com/channel/UC3ts8coMP645hZw9JSD3pqQ
CHAPTERS
00:00 - Introduction
00:26 - SerenityOS Videos & Andreas Kling
01:12 - Andreas Kling Skills & Career
02:09 - Exploitation Requires Coding!
02:36 - What about Web Hacking?
03:42 - System Exploitation vs. Web Hacking
05:14 - Coding Useless for Web Hacking?!
05:43 - Programming in Different IT Security Jobs?
06:49 - IT Security as Entry-level Position?
07:07 - What's your Programming Experience?
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#BugBounty #Serenityos #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.







![Understanding C Pointer Magic Arithmetic | Ep. 07
We debug the line that causes the heap overflow. And its a great opportunity to understand pointers in C.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: https://www.hextree.io/
Watch this video and more on Hextree: https://app.hextree.io/courses/yt-sudoedit/understanding-the-vulnerability
Join the Hextree Discord: https://discord.gg/xgQpCQCpvy
The full playlist: https://www.youtube.com/playlist?list=PLhixgUqwRTjy0gMuT4C3bmjeZjuNQyqdx
Grab the files: https://github.com/LiveOverflow/pwnedit
The original disclosure: https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit
Episode 07:
CHAPTERS
00:00 - Intro & Motivation
00:46 - Create Debug Build
01:02 - The Crashing Location
01:43 - Scary Pointer Magic
02:10 - *to++ = *from
02:56 - Explaining: from++
04:03 - Explaining: *from
04:56 - Explaining: to++
05:23 - Explaining: *to = *from
05:54 - The Copy While Loop
06:26 - Explaining: from[0] vs *from
07:14 - The Bug!
08:35 - Wrong Allocation Size Calculated
09:30 - Unescape Logic
10:15 - Why though?
SUPPORT
Per video: https://www.patreon.com/join/liveoverflow
Per month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): https://shop.liveoverflow.com/
WATCH, FOLLOW & READ
Second channel: https://www.youtube.com/LiveUnderflow
Twitch: https://twitch.tv/LiveOverflow/
Twitter: https://twitter.com/LiveOverflow/
Instagram: https://instagram.com/LiveOverflow/
TikTok: https://www.tiktok.com/@liveoverflow_
LiveOverflow blog: https://liveoverflow.com/
Hextree blog (ad): https://www.hextree.io/blog
#BufferOverflow #BinaryExploitation #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement. Understanding C Pointer Magic Arithmetic | Ep. 07](https://i.ytimg.com/vi/zdzcTh9kUrc/mqdefault.jpg)