I've been trying to learn buffer overflows for the past few months, and have been having a real difficult time trying to get the concept down. Most tutorials I see work on exploiting already existing vulnerabilities in popular software, but not having vmware or a lab where I can actually go through the steps, I think it pretty difficult. I would love to see a tutorial that exploits a simple program - like the one below. Does anyone know of anything like this, or is anyone willing to write one?

Possibly, the tutorial could explain the registers (which I acutally understand at this point) and the basic address space of a windows system (possibly a linux system too).. I think something like this would be a real beneift to the community!

Cheers!


#include <iostream>
#include <stdio.h>
int main ( )
{
char name[2];
printf("Please type your name: ");
gets(name);
printf("Hello, %s", name);
return 0;
}