Stack Overflow on

Overflow in Silence: Stack Smash in MedBoard Log Viewer (x64)

Sun, 20 Apr 2025 00:00:00 +0000

Prologue — The Calm Before the Buffer Break
#

I wasn’t looking for trouble. Just bouncing between binaries on a slow weekend, half-interested in what outdated software still lingers in hospital networks. That’s when I stumbled on MedBoard Log Viewer — a quiet little utility meant to process and display logs in a fancy UI. But it was the backend log-loading routine that caught my eye. And once I spotted strcpy, I leaned forward.

Copy, Paste, Exploit: Buffer Overflow in EduGrade Import Engine

Wed, 18 Sep 2024 00:00:00 +0000

4. Buffer Overflow in EduGrade Import Engine (x64)
#

Platform: Windows 10 x64
Target: EduGrade Desktop (Import Engine Parser)
Discovered: August 2024
Status: Local Privilege Escalation (unpatched)
CVSS (Est.): 7.6 – Local overflow leads to code execution

Escape Protocols: Get Out Series Reversals – BSidesSF 2023

Sat, 04 Mar 2023 00:00:00 +0000

Prologue — Three Layers Deep
#

When I first saw the Get Out series in BSidesSF 2023, I thought it was going to be a quick play. A warmup, a logic check, and maybe some light patching. I didn’t realize I was about to sink hours into crafting an RPC client from scratch, abusing a fresh CVE, and building an exploit chain with an old-school stack overflow.