Mô tả

This course teaches exploit development concepts for Linux (x86_64) and it is specifically focused on format string vulnerabilities. This course begins by introducing students to the format string concepts on Linux x86_64 platform (though the concepts remain the same on other architectures too). We will slowly gear towards understanding how format string vulnerabilities can be leveraged to exploit other vulnerabilities such as Buffer Overflows. This is clearly taught in the course by showing various practical examples such as bypassing stack canaries and bypassing ASLR. This is an entry level to intermediate level course and we encourage you to take this course if you are interested to learn exploit development concepts surrounding format string vulnerabilities and memory leaks specifically for 64 bit intel processors. However, remember that the course involves a lot of assembly language and debugging using a debugger. So, you need patience and passion to learn the concepts taught in the course. This course makes use of a variety of techniques on exploit development and brace yourself if you are willing to learn by sitting in front of a computer. After successfully completing this course, you will be ready to attempt several industry leading practical cyber security certification exams. 

Bạn sẽ học được gì

Students will learn practical format string vulnerability concepts for x64 processors

Students will learn how to leak memory addresses using format string vulnerabilities on Linux for x64 processors

Students will learn how to bypass stack canaries on Linux for x64 processors

Students will learn advanced Linux Binary Exploitation concepts

Students will learn how to use pwntools binary exploitation framework

Yêu cầu

  • A computer with administrative access, if you want to follow the hands-on exercises.
  • It is good to have knowledge basic on exploit development

Nội dung khoá học

6 sections

Course Introduction

1 lectures
Course Introduction
01:37

Course Downloads

1 lectures
Course Downloads
00:07

Introduction to format strings

6 lectures
Lab setup
00:09
Introduction
01:00
Format Specifiers
02:02
How print functions work
10:38
Unusual usage of printf
04:54
Dangers of format string vulnerabilities
02:37

Exploiting Format String Vulnerabilities

10 lectures
Leaking strings from memory
08:46
Causing DOS using format string vulnerabilities
02:00
Introduction to Stack Canaries
10:41
Stack Canary Bypass - Part 1 (Introduction to pwntools)
02:11
Stack Canary Bypass - Part 2 (Manually leaking stack canary)
04:25
Stack Canary Bypass - Part 3 (Find offset of Stack Canary)
03:47
Stack Canary Bypass - Part 4 (Find offset of RIP)
06:31
Stack Canary Bypass - Final Exploit Part 1
06:51
Stack Canary Bypass - Final Exploit Part 2
07:04
Format String vulnerabilities
1 question

Course Conclusion

1 lectures
Conclusion
00:24

Bonus Section

1 lectures
Bonus Lecture
00:17

Đánh giá của học viên

Chưa có đánh giá
Course Rating
5
0%
4
0%
3
0%
2
0%
1
0%

Bình luận khách hàng

Viết Bình Luận

Bạn đánh giá khoá học này thế nào?

image

Đăng ký get khoá học Udemy - Unica - Gitiho giá chỉ 50k!

Get khoá học giá rẻ ngay trước khi bị fix.