课程目录

• 0x01 经典栈溢出(上)
• 经典栈溢出(上)
• 0x02 经典栈溢出(下)
• 经典栈溢出(下)
• 0x03 经典栈溢出实例之EasyRM2MP3
• 经典栈溢出实例之EasyRM2MP3
• 0x04 经典栈溢出实例之DNSTracer
• 经典栈溢出实例之DNSTracer
• 0x05 探索stack cookie
• 探索stack cookie
• 0x06 另辟蹊径之覆盖SEH
• 另辟蹊径之覆盖SEH
• 0x07 一次失败的栈溢出(SEH)之GetGo Download Manager
• 一次失败的栈溢出(SEH)之GetGo Download Manager
• 0x08 DEP与ASLR简述
• DEP与ASLR简述
• 0x09 Linux环境下的ROP(上)
• Linux环境下的ROP(上)
• 0x0A Linux环境下的ROP(下)
• Linux环境下的ROP(下)
• 0x0B Linux下ROP练习之r0pbaby[CTF-2015-defcon]
• Linux下ROP练习之r0pbaby[CTF-2015-defcon]
• 0x0C Windows环境下的ROP(上)
• Windows环境下的ROP(上)
• 0x0D Windows环境下的ROP(下)
• Windows环境下的ROP(下)
• 0x0E 探索上古Windows用户堆
• 探索上古Windows用户堆
• 0x0F 【特别篇】Windows上古-近代堆详述
• 【特别篇】Windows上古-近代堆详述
• 0x10 近代Windows用户堆的利用基础
• 近代Windows用户堆的利用基础
• 0x11 【特别篇】深入理解LFH
• 【特别篇】深入理解LFH
• 0x12 浅析Linux堆内存管理
• 浅析Linux堆内存管理
• slides
• DEP & ASLR简述.pptx
• Linux环境下的ROP.pptx
• Windows环境下的ROP.pptx
• 近代Windows用户堆的利用基础.pptx
• 经典栈溢出.pptx
• 另辟蹊径之覆盖SEH.pptx
• 浅析Linux堆内存管理.pptx
• 探索Stack Cookie.pptx
• 探索上古Windows用户堆.pptx
• 二进制安全(国外)
• Binary_Hacking_Course
• A simple Format String exploit example – bin 0x11-0WvrSfcdq1I
• Adapting the 32bit exploit to 64bit for format4 – bin 0x27-_lO_rwaK_pY
• Bruteforce 32bit Stack Cookie. stack0 – part 3 – bin 0x23-KGzHcqJV-QM
• Buffer Overflows can Redirect Program Execution – bin 0x0D-8QzOC8HfOqU
• Developing an intuition for binary exploitation – bin 0x20-akCce7vSSfw
• Doing ret2libc with a Buffer Overflow because of restricted return pointer – bin 0x0F-m17mV24TgwY
• Explaining Dirty COW local root exploit – CVE-2016-5195-kEsshExn7aE
• First Exploit! Buffer Overflow with Shellcode – bin 0x0E-HSlhY4Uy8SA
• First remote root exploit – bin 0x1D-HAN8Qun26cQ
• First Stack Buffer Overflow to modify Variable – bin 0x0C-T03idxny9jE
• Format String Exploit and overwrite the Global Offset Table – bin 0x13-t1LH9D5cuK4
• Global Offset Table (GOT) and Procedure Linkage Table (PLT) – bin 0x12-kUk5pw4w0h4
• How a CPU works and Introduction to Assembler – bin 0x04-6jSKldt7Eqs
• Introduction to Linux – Installation and the Terminal – bin 0x01-navuBR4aJSs
• Linux signals and core dumps – bin 0x1C-_shKdU7mGxs
• LiveOverflow Channel Introduction and Backstory – bin 0x00-iyAyN3GFM7A
• Playing around with a Format String vulnerability and ASLR. format0 – bin 0x24-CyazDp-Kkr0
• Remote format string exploit in syslog – bin 0x1E-MBz5C9Wa6KM
• Reverse engineering C programs – bin 0x10-vXWHmucgZW0
• Reversing and Cracking first simple Program – bin 0x05-VroEiMOJPm8
• Simple Tools and Techniques for Reversing a binary – bin 0x06-3NTXFUxcKPc
• Smashing the Stack for Fun and Profit – setuid, ssh and exploit.education – bin 0x0B-Y-4WHf0of6Y
• Socket programming in python and Integer Overflow – bin 0x1B-d6BU8DWxb3c
• Stack grooming and 100% reliable exploit for format0 – bin 0x25-AahpiYxKR2c
• Syscalls, Kernel vs. User Mode and Linux Kernel Source Code – bin 0x09-fLS99zJDHOc
• TCP Protocol introduction – bin 0x1A-0EHo0HsTKJw
• The deal with numbers – hexadecimal, binary and decimals – bin 0x0A-mT1V7IL2FHY
• The Heap – dlmalloc unlink exploit – bin 0x18-HWhzH–89UQ
• The Heap – How do use-after-free exploits work – bin 0x16-ZHghwsTRyzQ
• The Heap – How to exploit a Heap Overflow – bin 0x15-TfJrU95q1J4
• The Heap – Once upon a free – bin 0x17-gL45bjQvZSU
• The Heap – what does malloc do – bin 0x14-HPDBOhiKaD8
• Uncrackable Program Finding a Parser Differential in loading ELF – Part 2_2 – bin 0x08-OZvc-c1OLnM
• Uncrackable Programs Key validation with Algorithm and creating a Keygen – Part 1_2 – bin 0x07-qS4VWL5R_OM
• Writing a simple Program in C – bin 0x02-JGoUaCmMNpE
• Writing a simple Program in Python – bin 0x03-ajy1PHWYeyQ