> For the complete documentation index, see [llms.txt](https://romc.gitbook.io/exploit-dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://romc.gitbook.io/exploit-dev/master.md).

# README

## Introduction to Exploit Development Course

## Scenario

* Media RM2MP3 Converter is a small software application specialized in converting audio and video files (RM and RMVB) to MP3 file format using batch actions

  On July 17, 2009 a Buffer Overflow vulnerability was reported for this software via [packetstormsecurity.org](https://github.com/dco-idm/Intro-Exploit-Development-Course/tree/095f11fcb43cd31c465832761da142fef11fce3a/packetstormsecurity.org)
* Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long filename in a playlist (.m3u) file.

  **Prerequisites**

   Easily found with a quick Google search.

  * RM2MP3 Converter
  * Immunity Debugger (Optional)

### Activity summary:

* Lab 1 - [Crash RM2MP3 Converter](https://github.com/dco-idm/Intro-Exploit-Development-Course/tree/master/assignments/labs/lab1.MD)
* Lab 2 – [Sample Code](https://github.com/dco-idm/Intro-Exploit-Development-Course/tree/master/assignments/labs/lab2.MD)
* Lab 3 – [Locating EIP](https://github.com/dco-idm/Intro-Exploit-Development-Course/tree/master/assignments/labs/lab3.MD)
* Lab 4 – [Shellcode?](https://github.com/dco-idm/Intro-Exploit-Development-Course/tree/master/assignments/labs/lab4.MD)
* Lab 5 – [Shellcode testing](https://github.com/dco-idm/Intro-Exploit-Development-Course/tree/master/assignments/labs/lab5.MD)
* Lab 6 – [Locating op codes](https://github.com/dco-idm/Intro-Exploit-Development-Course/tree/master/assignments/labs/lab6.MD)
* Lab 7 – [Writing shellcode](https://github.com/dco-idm/Intro-Exploit-Development-Course/tree/master/assignments/labs/lab7.MD)
* Lab 8 – [Changing encoding to get shellcode](https://github.com/dco-idm/Intro-Exploit-Development-Course/tree/master/assignments/labs/lab8.MD)
* Lab 9 – [Getting a legitimate shell](https://github.com/dco-idm/Intro-Exploit-Development-Course/tree/master/assignments/labs/lab9.MD)
* Lab 10 - [Bad Characters](https://github.com/dco-idm/Intro-Exploit-Development-Course/tree/master/assignments/labs/lab10.MD)