> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/useful-resources/exploit-development.md).

# 漏洞利用开发

用于学习漏洞利用开发基础的缓冲区溢出练习笔记：崩溃复现、偏移量发现、坏字符检查、shellcode 放置，以及受控载荷执行。

## 漏洞利用开发实验

<table data-view="cards" data-full-width="false" data-search="false"><thead><tr><th></th><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><h3><i class="fa-folder-tree" style="color:$primary;">:folder-tree:</i></h3></td><td><h4>Linux 缓冲区溢出 - 自定义</h4></td><td>用于构建漏洞利用、控制执行流、制作载荷以及记录内存破坏方法的自定义 Linux 缓冲区溢出笔记。</td><td><a href="/pages/111fe7b2e36d2a03b2ecbd65d5af78479e579b44">/pages/111fe7b2e36d2a03b2ecbd65d5af78479e579b44</a></td></tr><tr><td><h3><i class="fa-file-code" style="color:$primary;">:file-code:</i></h3></td><td><h4>Linux 缓冲区溢出 - Agent 二进制</h4></td><td>用于崩溃分析、偏移量发现、载荷构建以及在 CTF 风格实验中验证漏洞利用的 Linux Agent 二进制缓冲区溢出笔记。</td><td><a href="/pages/a6019203da85ea45e32da29f71b094bbb77b2ae3">/pages/a6019203da85ea45e32da29f71b094bbb77b2ae3</a></td></tr><tr><td><h3><i class="fa-envelope" style="color:$primary;">:envelope:</i></h3></td><td><h4>Windows 缓冲区溢出 - SLMail</h4></td><td>SLMail Windows 缓冲区溢出笔记，涵盖 POP3 模糊测试、偏移量发现、JMP ESP 选择、shellcode 传递以及漏洞利用验证。</td><td><a href="/pages/2da3dbca01a491543eb82e23d05cf50a138a4d71">/pages/2da3dbca01a491543eb82e23d05cf50a138a4d71</a></td></tr><tr><td><h3><i class="fa-folder-tree" style="color:$primary;">:folder-tree:</i></h3></td><td><h4>Windows 缓冲区溢出 - MiniShare</h4></td><td>MiniShare Windows 缓冲区溢出笔记，涵盖模糊测试、EIP 控制、坏字符分析、shellcode 生成以及漏洞利用开发练习。</td><td><a href="/pages/1ad118e8357f083b9b8814b12cc3829f0428a930">/pages/1ad118e8357f083b9b8814b12cc3829f0428a930</a></td></tr></tbody></table>

### 工作流程

1. 复现崩溃并控制输入大小。
2. 找到偏移量，验证指令指针控制，并识别坏字符。
3. 放置 shellcode 或受控载荷，并记录每个调试器检查点。
4. 将漏洞利用代码、截图、偏移量、寄存器和命令整理在一起，以便复现。


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://hacking-notes.jord4n.pro/zh/useful-resources/exploit-development.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.