Introduction To Software Exploits smaples , videos , source codes and slides Free Download

Introduction To Software Exploits smaples , videos , source codes and slides

English | Size: 6.41 GB (6,882,566,099 Bytes)
Category: CBTs

Software vulnerabilities are flaws in program logic that can be leveraged by an attacker to execute arbitrary code on a target system. This class will cover both the identification of software vulnerabilities and the techniques attackers use to exploit them. In addition, current techniques that attempt to remediate the threat of software vulnerability exploitation will be discussed.

Lab Requirements: The Linux VM provided below. Or any Linux VM with the provided vulnerable software examples installed.

Class Textbook: “The Shellcoder’s Handbook: Discovering and Exploiting Security Holes” (2nd edition) by Chris Anley, John Heasman, Felix Lindner, Gerardo Richarte

Recommended Class Duration: 2 days

Creator Available to Teach In-Person Classes: Yes

Author Comments:

This will be a lab driven class where specific software vulnerability types in particular environments are discussed and then exploited in a lab setting. Examples of lab components of the class as well as specific topics covered include:

•Shellcode development

•Stack overflow exploitation

•Heap overflow exploitation

•Static source code analysis

•Defeating non-executable stack protection

The class will help students be more aware of the specific details and mechanisms of software exploits we see in the wild. This knowledge will enable the students to better analyze their own software for vulnerabilities in an effort to produce more secure code.

Author Biography:

Corey Kallenberg co-founded LegbaCore in January 2015 to focus on improving firmware security. He has a Bachelors of Science in Computer Science from the University of Waterloo. His specialty areas are trusted computing, vulnerability research and low level development. In particular, Corey has spent several years using his vulnerability research expertise to evaluate limitations in current trusted computing implementations. In addition, he has used his development experience to create and improve upon trusted computing applications. Among these are a timing based attestation agent designed to improve firmware integrity reporting, and an open source Trusted Platform Module driver for Windows. Corey is also an experienced trainer, having created and delivered technical courses for the MITRE Institute, OpenSecurityTraining.info, CanSecWest, as well as numerous private customers. He is an internationally recognized speaker who has presented at BlackHat USA, DEF CON, CanSecWest, Hack in the Box KUL/AMS/GSEC, SummerCon, NoSuchCon, SyScan, EkoParty and Ruxcon. In 2015, Corey won the Pwnie award for best privilege escalation bug, for CERT VU# 552286, which exploits from userspace (ring 3) to SMM (ring “-2”), and which was found on hundreds of models of computers.

Buy Long-term Premium Accounts To Support Me & Max Speed

DOWNLOAD:

If any links die or problem unrar, send request to http://goo.gl/aUHSZc

Introduction To Software Exploits smaples , videos , source codes and slides

About Learning for Life

Leave a Reply Cancel reply