W2_2 - Return-to-libc attack

"This video is part of the NPTEL course Information Security module 5 and covers topics on Secure Systems Engineering.
The Virtual Machine used in the demo videos can be found here:
drive.google.com/file/d/1wLNV....
The slides and other associated materials can be accessed here:
bitbucket.org/casl/sse."
To access the translated content:
1. The translated content of this course is available in regional languages. For details please visit nptel.ac.in/translation
The video course content can be accessed in the form of regional language text transcripts, books which can be accessed under downloads of each course, subtitles in the video and Video Text Track below the video.
Your feedback is highly appreciated. Kindly fill this form forms.gle/XFZhSnHsCLML2LXA6
2. Regional language subtitles available for this course
To watch the subtitles in regional languages:
1. Click on the lecture under Course Details.
2. Play the video.
3. Now click on the Settings icon and a list of features will display
4. From that select the option Subtitles/CC.
5. Now select the Language from the available languages to read the subtitle in the regional language.

[@JannisAdmek]

This is so interesting, and you are very good at explaining! From the bottom of my heart, thank you for these free lessons!

[@sylviashen3838]

Thanks for this tutorial. Now I know how return to libc attack worked. It helps a lot!

[@123liveo]

Excellent. Thanks very much for the video. Very useful!!

[@amoldhamale3202]

so if I understood this correctly, this attack would work on non-exec stack but It would fail for canaries because before returning the canary value would be checked. Am I right?

[@m07hcn62]

Thank you sir for this clear explanation !

[@ffwfcf]

i really wanna hug that man, thanks a lot

[@Quancept]

Thank you sir!

[@pradipgareja3848]

thank you sir...

[@theanhart6048]

thanks you very much for this video

[@user-op2gu4bp8n]

thanks a lot!!

[@tommymairo8964]

10:56 why should we offset 4 bytes on the stack?

[@tommymairo8964]

11:47 why exit function will get called after system function completion?