SUMMARY.md

Summary

Getting Started

• Introduction to the Guide
• Overview
• Quick Start

Scripting for CTFs

• Overview
• Basic File Operations
• Network Operations
• Cryptography
• Starting Processes

Pwntools

• Overview
• Workflow

Linux Basics

• Environment Setup
• Basic Commands
• procfs
• ELF Format

Linux (x86-64) Exploitation

• Environment Setup
• Basic Concepts
• Defenses and Mitigations
  • Address Space Layout Randomisation
  • No eXecute
  • Stack Canary
  • Fortify Source
  • Position Independent Executable
  • Control Flow Integrity
• Stack Based Corruption
  • Jump to Shellcode
  • Return Oriented Programming
  • SigReturn Oriented Programming
  • Stack Pivoting
  • Uninitialised Local Variables
• Format String Attacks
• Heap Based Corruption
  • Use After Free
  • Double Free
  • House of Spirit
• Techniques and Tricks
  • Return to Procedure Linkage Table (PLT)
  • Global Offset Table Overwrite
  • vsyscall Page
  • linux.gate.so.1
  • Stack Protect Information Leak
  • Return to libc
  • Return to dl-resolve
  • Overwrite .dtors Section
  • Magic libc Gadgets
  • File Stream Structure Corruption

Linux Privilege Escalation

• Overview

Memory Allocators

• jemalloc
• dlmalloc

Miscellaneous Exploitation

• Overview
• Bash
  • General Tricks
  • Shellshock
• Python
  • Sandbox Escapes
  • Unsafe Deserialisation

Web

• Cross-Site Scripting
• PHP
  • Loose Comparisons
  • Local File Inclusion
  • Deserialisation

Cryptography

• Hashing
• Public Key Cryptography

Tools

• Reverse Engineering and Exploitation
  • IDA Pro
  • Binary Ninja
  • Pwntools

Further Reading

• References