First BufferOverFlow Exploit - SLmail

Seattle Lab Mail:

           It is certainly my first exploit, I wrote this exploit in coordination with the existing exploit written by an Author named muts as for his profile on exploit-db. I have no idea about his real name and that's not our concern here too.

Links:

          That existing is found on the link:  https://www.exploit-db.com/exploits/638/

          And my exploit is found on the link: https://github.com/stormworm29/SLMail_BufferOverFlow_Exploit

Output:

 Solution:

        This exploit was certainly interesting, just understanding it took me a while, being my first exploit.

        I made a simple walk through already on the above github link. This post is just the counter part How and Why I was able to exploit it and what was the preventive measures to be taken to prevent them.

       Here the main part exploited is the PASS field, if you had a little patience when passing through the last part of the final exploit file slmailexploit.py. All parts of the exploits are flooded into a single input field PASS. 

       What the real problem here is a simple input validation restricting the number of characters that can be given as input. Consider a simple C++ program if pass is a character array of length 20 taken a input then.

That's really simple isn't it.Just think a little bit more than a normal developer to built a better secure Application.

Happy Hacking :)
For clarifications you can leave your comments below, And further, if you find an interesting exploits leave it below let's solve them.