ctf101-systems-2016

ctf101 systems security repository. Day two of the workshop.

Objective

By the end of the workshop, participants should be aware of the skills and some of the tools required to develop exploits for systems based applications.

Syllabus

0. Approach
1. Overview of Systems Exploitation
2. Offensive Python 101
3. Input/Output
4. Types of Compromise
5. Illustration of Compromise in Target Python Applications
6. C and x86-64 Assembly
7. Memory Layout
8. Stack Frames
9. Debuggers
10. Memory Corruption Vulnerabilities
11. Mitigations and Bypasses
12. Conclusions and Additional Challenges

What Is Not Covered?

1. Shellcode Writing
2. Heap vulnerabilities
3. Return Oriented Programming

Lesson Plan

Please refer to the lesson plan for complete content.