Ethical Hacking Memory Corruption
The course presents fundamental concepts about vulnerabilities and exploits related to memory corruption and stack-based Buffer Overflow on Linux and Windows systems (x86 and x86-64).
About the Course
The Ethical Hacking Memory Corruption (EHMEC) course presents fundamental concepts about vulnerabilities and exploits related to memory corruption on Linux and Windows systems.
Every day, new flaws are discovered in various systems—be it a web application, custom software, or an operating system component—installed on a workstation, server, or mobile device. For a long time, and even today, it is still possible to come across programs or executables that were designed with weaknesses in their development process.
In this training, we will work on the basic techniques for creating exploits to target binaries on 32-bit (x86) and 64-bit (x86-64) platforms, for both Linux and Windows operating systems, focusing on memory corruption vulnerabilities and stack-based Buffer Overflow.
Various topics will be covered, such as: computer architecture, memory management, registers, binary structure, x86 Assembly language, use of debuggers for Linux and Windows, organization and operation of the stack, shellcode, how to detect and debug a memory corruption flaw, understanding and exploiting buffer overflow vulnerabilities, existing protections, basic protection bypass techniques, fundamentals of exploit development, among others.
EHMEC prepares students for more advanced GoHacking courses, such as Ethical Hacking Exploit Development (EHXD) and Ethical Hacking Reverse Engineering Malware (EHREM).
Course Content
- 1.Fundamentals of Computer Architecture
- 2.Fundamentals of Memory Management
- 3.Registers (32-bit and 64-bit)
- 4.Binary Structure (Linux and Windows)
- 5.Introduction to x86 Assembly Language
- 6.Introduction to GNU Debugger (GDB)
- 7.Organization and Operation of the Stack
- 8.Introduction to Shellcode on Linux
- 9.Memory Corruption in Binaries (Linux and Windows)
- 10.Understanding the Buffer Overflow Mechanism
- 11.Using the GEF Debugger
- 12.Buffer Overflow on Linux (x86)
- 13.Protections and Defense Mechanisms
- 14.Bypassing NX Protection using the ret2libc technique
- 15.Buffer Overflow on Linux (x64)
- 16.Introduction to Debuggers for Windows (WinDBG, x32dbg, x64dbg, Immunity, Mona.py)
- 17.Buffer Overflow on Windows for local exploitation
- 18.Buffer Overflow on Windows for remote exploitation