Offensive Security – prof. Cataldo Basile

• Slides of the lessons and exercises; Lab exercises texts and some hints and solutions; links to online resources (writeups, exploitation examples); Video recordings of the classes

Argomenti del programma: Memory management (1CFU) - Review of the basics on memory management in Linux applications (stack, functions) and OS-level mitigations (stack canaries, ASLR, DEP) - Dynamic memory, GOT and PLT - Heap in Linux and some heap-level mitigations, use of the heap in Windows (sketch) Binary exploitation (2CFUs) - Code reuse attacks (gadgets, ROP, ret2libc) - Heap exploitation attacks - Bypassing stack canaries and ASLR Web…