~/CSC 472

CSC 472

Software Security & Exploitation

How memory-corruption vulnerabilities work, how they are exploited, and how modern defenses stop them.

pwntoolsGDB / pwndbgGhidraROPgadgetone_gadgetQEMU

01

Lectures

Introduction and the Memory-Corruption Landscape

18 knowledge points

Process Memory, x86-64 Assembly, and the Stack

23 knowledge points

Buffer Overflows and Return-Address Hijacking

17 knowledge points

Shellcode

18 knowledge points

Exploit Mitigations and Modern Defenses

19 knowledge points

Format String Vulnerabilities

18 knowledge points

Return-Oriented Programming and ret2libc

18 knowledge points

Multi-Stage Exploitation — Info Leaks and GOT Overwrite

20 knowledge points

Heap Exploitation

25 knowledge points

Kernel Exploitation and Wrap-Up

20 knowledge points

02

Labs

Stack Frames, GDB, and pwntools

7 sections

Stack Buffer Overflow

8 sections

Format String Vulnerabilities

7 sections

Return-Oriented Programming (ROP)

7 sections

Multi-Stage Exploitation: Info Leak, GOT Overwrite, and ret2libc

7 sections

Heap Exploitation: Use-After-Free and tcache

7 sections

Kernel Exploitation: Use-After-Free

8 sections