Mô tả

This course teaches exploit development for Linux (x86). This course introduces students to the exploit development concepts associated with Linux x86 binaries. This is an entry level to intermediate level course and we encourage you to take this course if you are interested to learn exploit development. However, remember that the course involves a lot of assembly language and debugging using a debugger. So, you need patience and passion to learn the concepts taught in the course. This course makes use of a variety of techniques on exploit development and brace yourself if you are willing to learn by sitting in front of a computer. After successfully completing this course, you will be ready to attempt several industry leading practical cyber security certification exams. 

Bạn sẽ học được gì

Students will learn assembly language fundamentals for x86 processors

Students will learn how to write shellcode on Linux for x86 processors

Students will learn practical Linux exploit development concepts

Students will learn how to bypass Linux exploit mitigation techniques such as NX and ASLR

Yêu cầu

  • A computer with administrative access, if you want to follow the hands-on exercises.
  • It is good to have knowledge basic on exploit development

Nội dung khoá học

10 sections

Course Introduction

1 lectures
Introduction
05:04

Lab setup

3 lectures
Installing Ubuntu 16.04 Desktop
04:50
Installing tools in the lab VM
11:49
VM with tools and exploits - Download
00:09

x86 Assembly crash course

8 lectures
Introduction and registers
04:20
MOV instruction and gdb intro
09:26
Accessing sub registers
03:11
ADD, SUB, INC, DEC instructions
04:42
XOR instruction
02:22
PUSH and POP instructions
03:38
CMP and JNE instructions
06:35
CALL, LEAVE, RET instructions
07:49

Stack Based Buffer Overflows

10 lectures
Introduction
00:58
Compiling the program - No NX, ASLR & Stack Canary
04:29
Crashing the program
06:56
Finding offset to overwrite EIP
08:14
Using 3rd Party shellcode in the exploit
10:35
Finalizing the working exploit
08:59
JMP EAX technique - Introduction
04:19
JMP EAX Exploit
08:42
JMP ESP technique - Introduction
07:36
JMP ESP Exploit
09:08

Dealing with Bad characters

3 lectures
msfvenom and introduction to bad characters
12:57
Identifying bad characters
07:43
Final exploit with shellcode from msfvenom
02:48

Writing Shellcode

9 lectures
Introduction
03:32
Exit shellcode - Part 1
06:16
Exit shellcode - Part 2
05:25
Execve shellcode
13:27
Reverse TCP shellcode - Part 1
06:49
Reverse TCP shellcode - Part 2
05:03
Reverse TCP shellcode - Part 3
09:36
Reverse TCP shellcode - Part 4
15:12
Reverse TCP shellcode - Part 5
07:18

Bypassing Exploit Mitigation Techniques

5 lectures
Introduction
01:04
Understanding NX
05:47
Bypassing NX using Ret2Libc
15:16
Finding string offsets Using Ropper
01:04
Understanding and Bypassing ASLR
10:37

Return Oriented Programming

6 lectures
Introduction
07:03
Introduction to mprotect
09:14
Return Oriented Programming - Part 1
21:03
Return Oriented Programming - Part 2
14:37
Return Oriented Programming - Part 3
05:26
Final exploit with rop chain
05:28

Conclusion

1 lectures
Conclusion
00:22

Bonus section

3 lectures
More Challenges
01:07
Student Solution 1 by Geoffrey Huck
01:27:49
Bonus lecture
00:17

Đánh giá của học viên

Chưa có đánh giá
Course Rating
5
0%
4
0%
3
0%
2
0%
1
0%

Bình luận khách hàng

Viết Bình Luận

Bạn đánh giá khoá học này thế nào?

image

Đăng ký get khoá học Udemy - Unica - Gitiho giá chỉ 50k!

Get khoá học giá rẻ ngay trước khi bị fix.