Обучающие видео » Компьютерные видеоуроки и обучающие интерактивные DVD » Компьютерные сети и безопасность
Linux Heap Exploitation - Part 1Год выпуска: 7/2024
Производитель: Udemy
Сайт производителя:
https://www.udemy.com/course/linux-heap-exploitation-part-1/Автор: Max Kamper
Продолжительность: 4h 51m
Тип раздаваемого материала: Видеоурок
Язык: Английский
Описание: For nearly 20 years, exploiting memory allocators has been something of an art form. Become part of that legacy with HeapLAB.
The GNU C Library (GLIBC) is a fundamental part of most Linux desktop and many embedded distributions; its memory allocator is used in everything from starting threads to dealing with I/O. Learn how to leverage this vast attack surface via different heap exploitation techniques, from the original "Unsafe Unlink" to the beautiful overflow-to-shell "House of Orange".
In this hands-on course, students will alternate between learning new techniques and developing their own exploits based on what they've learned. We'll make use of the pwntools and pwndbg frameworks to drop shells from vulnerable practice binaries, and you'll take on challenges that test what you've learned.
[spoiler="Содержание"]
01. Introduction1. Welcome (01:33)
2. What is GLIBC (04:48)
3. What is malloc (02:40)
4. Environment setup (04:37)
02. The House of Force1. The top chunk (09:51)
2. Our 1st vulnerable binary (08:01)
3. Arbitrary write via the House of Force (16:54)
4. Code execution via the House of Force (12:15)
03. The Fastbin Dup1. The fastbins (09:54)
2. Arbitrary write via the Fastbin Dup (17:16)
3. Code execution via the Fastbin Dup (14:40)
04. CHALLENGE Fastbin Dup 21. Fastbin Dup 2 (24:04)
05. Unsafe Unlink1. Unlinking (10:13)
2. The original Unsafe Unlink (22:09)
06. Safe Unlink1. The Safe Unlink (22:20)
07. The House of Orange1. What is the House of Orange (01:09)
2. File stream exploitation (10:42)
3. The Unsortedbin Attack (15:38)
4. The complete House of Orange (34:04)
08. CHALLENGE One-Byte1. Remaindering (06:38)
2. One-Byte (39:14)
09. Farewell1. Outro (02:32)
[/spoiler]
Файлы примеров: не предусмотрены
Формат видео: MP4
Видео: AVC, 1280x720, 16:9, 30fps, 737kbps
Аудио: AAC, 44.1Hz, 128kbps, stereo
[spoiler="Скриншоты"]








[/spoiler]