THE ARM IoT EXPLOIT LABORATORY - Damn Vulnerable ARM Router (DVAR)
------------------------------------------------------------------
DVAR is an emulated Linux based ARM router running a vulnerable web server
that you can sharpen your ARM stack overflow skills with.

DVAR runs in the tinysploitARM VMWare VM under a fully emulated QEMU ARM
router image.

Simply extract the ZIP file and launch the VM via tinysploitARM.vmx.
After starting up, the VM's IP address and default URL shall be displayed
on the console. Using your host computer's browser, navigate to the URL and
follow the instructions and clues. The virtual network adapter is set to
NAT mode.

Your goal is to write a working stack overflow exploit for the web server
running on the DVAR tinysploitARM target.

SHA256: 1f2bdd9ae4e44443dbb4bf9062300f1991c47f609426a1d679b8dcd17abb384c

DVAR started as an optional preparatory exercise for the ARM IoT Exploit Lab.

UPCOMING ARM IoT EXPLOIT LABORATORY TRAINING
--------------------------------------------
RECON Brussels 2018 (4 day) January 29-Feb 1
https://recon.cx/2018/brussels/training/trainingexploitlab.html

Offensivecon Berlin 2018 (4 day) February 12-15
https://www.offensivecon.org/trainings/2018/the-arm-iot-exploit-laboratory-saumil-shah.html

Cansecwest Vancouver 2018 (4 day) March 10-13
https://cansecwest.com/dojos/2018/exploitlab.html

SyScan360 Singapore 2018 (4 day) March 18-21
https://www.coseinc.com/syscan360/index.php/syscan360/details/SYS1842#regBox

Helpful material
----------------
If you are new to the world of ARM exploitation, I highly recommend Azeria's
excellent tutorials on ARM Assembly, ARM Shellcode and the basics of ARM
exploitation.

https://azeria-labs.com/    Twitter: @Fox0x01

And these are three general purpose concepts oriented tutorials that every
systems enthusiast must know:

Operating Systems - A Primer:
http://www.slideshare.net/saumilshah/operating-systems-a-primer

How Functions Work:
http://www.slideshare.net/saumilshah/how-functions-work-7776073

Introduction to Debuggers:
http://www.slideshare.net/saumilshah/introduction-to-debuggers

EXPLOIT LABORATORY BLOG:
------------------------
http://blog.exploitlab.net/

Saumil Shah
@therealsaumil
