hackallthethings.com

howto.hackallthethings.com

Training for manipulating all kinds of things: July 2016

http://howto.hackallthethings.com/2016_07_01_archive.html

July 29, 2016. Secure C 103 - Type Confusion. Interested in having your homework graded? To learn about grading options. The release schedule for this course is available here. July 27, 2016. Secure C 102 - Heaps and Format Strings. We continue last time's lecture. Interested in having your homework graded? To learn about grading options. The release schedule for this course is available here. July 25, 2016. Targeting, .dtors targeting, unsafe linked lists, integer vulnerabilities and nuances (intege...

howto.hackallthethings.com

Training for manipulating all kinds of things: September 2016

http://howto.hackallthethings.com/2016_09_01_archive.html

September 30, 2016. In this lecture, our guest Dr. Devin Cook, offers a overview of the brief history of modern binary exploitation. He covers everything from early buffer overflows and early stack overflow mitigations to modern mitigations, modern bypass techniques, and R. September 26, 2016. This lecture's first half covers new material involving professional tips for R. Interested in having your homework graded? To learn about grading options. The release schedule for this course is available here.

howto.hackallthethings.com

Training for manipulating all kinds of things: Learning Exploitation with Offensive Computer Security 2.0

http://howto.hackallthethings.com/2016/07/learning-exploitation-with-offensive.html

July 22, 2016. Learning Exploitation with Offensive Computer Security 2.0. After months of preparation, we are pleased to announce the official release schedule. For Dr. Owen Redwood’s Offensive Computer Security (. This iteration of the course includes new content, all-new lectures, and all-new exercises. A video trailer. Of the material has been provided in this post as an outline of the examined topics. We've also included a brief summary of the access tiers. As there are standard, academic. Social En...

howto.hackallthethings.com

Training for manipulating all kinds of things: DFIR / Volatility

http://howto.hackallthethings.com/2016/10/dfir-volatility.html

October 17, 2016. This lecture on D. Covers the following topics: I. Building a DFIR team, effective strategies and actions during incident response, and recommended tools. The second part offers a demonstration of Volatility, IDA PRO, and YARA for digital forensics and malware analysis. Interested in having your homework graded? To learn about grading options. The release schedule for this course is available here. Note: Please keep comments academic in nature. Subscribe to: Post Comments (Atom).

howto.hackallthethings.com

Training for manipulating all kinds of things: Exploitation 107

http://howto.hackallthethings.com/2016/10/exploitation-107.html

October 5, 2016. This lecture is the final exploit development lecture for the course. In it we touch on a few final topics for format string exploitation and heap sprays. We additionally cover clang, it's exploit mitigations, and a novel exploit mitigation bypass technique for clang's "safe-stack". We finally cover. KERNHEAP, and SeLinux. Interested in having your homework graded? To learn about grading options. The release schedule for this course is available here. Subscribe to: Post Comments (Atom).

howto.hackallthethings.com

Training for manipulating all kinds of things: August 2016

http://howto.hackallthethings.com/2016_08_01_archive.html

August 26, 2016. This lecture has several walkthroughs and demos of modern binary exploitation techniques for heap and format string vulnerabilities. For heap exploitation we examine classic heap buffer overflow exploitation (e.g. unlink macro targeting. And more. Finally we of course discuss how each exploit mitigation is bypassed. Slides for this lecture begin on slide 56. At this time, students are expected to have completed Homework 4. Assigned in Lecture 08: Reverse Engineering x86 102. This is the ...

howto.hackallthethings.com

Training for manipulating all kinds of things: Tying All The Things Together

http://howto.hackallthethings.com/2016/10/tying-all-things-together.html

October 27, 2016. Tying All The Things Together. This final lecture presents the course review, a survey of recent trends in cybersecurity and malware, effective strategies and guidelines for Security Operations Centers (. And presents the final exam review. Interested in having your homework graded? To learn about grading options. The release schedule for this course is available here. Security information and event management. Note: Please keep comments academic in nature. Tying All The Things Together.

howto.hackallthethings.com

Training for manipulating all kinds of things: Social Engineering and Physical Security

http://howto.hackallthethings.com/2016/10/social-engineering-and-physical-security.html

October 14, 2016. Social Engineering and Physical Security. Interested in having your homework graded? To learn about grading options. The release schedule for this course is available here. Note: Please keep comments academic in nature. Subscribe to: Post Comments (Atom). Tying All The Things Together. Social Engineering and Physical Security. Simple theme. Powered by Blogger.

howto.hackallthethings.com

Training for manipulating all kinds of things: October 2016

http://howto.hackallthethings.com/2016_10_01_archive.html

October 27, 2016. Tying All The Things Together. This final lecture presents the course review, a survey of recent trends in cybersecurity and malware, effective strategies and guidelines for Security Operations Centers (. And presents the final exam review. Interested in having your homework graded? To learn about grading options. The release schedule for this course is available here. Security information and event management. October 17, 2016. This lecture on D. Covers the following topics: I. In dept...