Binary exploitation
Memory layout, mitigations, crashes, and lab-only exploitation concepts.
- 001 Process memory layout Learn Process memory layout through a safe, repeatable binary exploitation workflow.
- 002 Stack frames and calling conventions Learn Stack frames and calling conventions through a safe, repeatable binary exploitation workflow.
- 003 Crash triage workflow Learn Crash triage workflow through a safe, repeatable binary exploitation workflow.
- 004 Fuzzing a toy parser Learn Fuzzing a toy parser through a safe, repeatable binary exploitation workflow.
- 005 Mitigations overview Learn Mitigations overview through a safe, repeatable binary exploitation workflow.
- 006 Integer bug concepts Learn Integer bug concepts through a safe, repeatable binary exploitation workflow.
- 007 Format string concepts Learn Format string concepts through a safe, repeatable binary exploitation workflow.
- 008 Return-oriented programming overview Learn Return-oriented programming overview through a safe, repeatable binary exploitation workflow.
- 009 Shellcode ethics and lab boundaries Learn Shellcode ethics and lab boundaries through a safe, repeatable binary exploitation workflow.
- 010 Writing safe binary exploit notes Learn Writing safe binary exploit notes through a safe, repeatable binary exploitation workflow.
- 011 Buffer overflow basics Learn Buffer overflow basics through a safe, repeatable binary exploitation workflow.
- 012 Stack buffer overflow Learn Stack buffer overflow through a safe, repeatable binary exploitation workflow.
- 013 Off by one overwrite Learn Off by one overwrite through a safe, repeatable binary exploitation workflow.
- 014 Cyclic patterns and offset finding Learn Cyclic patterns and offset finding through a safe, repeatable binary exploitation workflow.
- 015 Endianness and packing values Learn Endianness and packing values through a safe, repeatable binary exploitation workflow.
- 016 Saved return pointer control Learn Saved return pointer control through a safe, repeatable binary exploitation workflow.
- 017 NX and executable stack Learn NX and executable stack through a safe, repeatable binary exploitation workflow.
- 018 ASLR and address leaks Learn ASLR and address leaks through a safe, repeatable binary exploitation workflow.
- 019 PIE and base address leaks Learn PIE and base address leaks through a safe, repeatable binary exploitation workflow.
- 020 Stack canaries Learn Stack canaries through a safe, repeatable binary exploitation workflow.
- 021 Canary leak patterns Learn Canary leak patterns through a safe, repeatable binary exploitation workflow.
- 022 Return to win challenges Learn Return to win challenges through a safe, repeatable binary exploitation workflow.
- 023 Return to libc Learn Return to libc through a safe, repeatable binary exploitation workflow.
- 024 ret2plt and GOT leaks Learn ret2plt and GOT leaks through a safe, repeatable binary exploitation workflow.
- 025 ROP chain fundamentals Learn ROP chain fundamentals through a safe, repeatable binary exploitation workflow.
- 026 ROP gadgets and constraints Learn ROP gadgets and constraints through a safe, repeatable binary exploitation workflow.
- 027 Stack pivoting basics Learn Stack pivoting basics through a safe, repeatable binary exploitation workflow.
- 028 Sigreturn oriented programming concepts Learn Sigreturn oriented programming concepts through a safe, repeatable binary exploitation workflow.
- 029 Format string reads Learn Format string reads through a safe, repeatable binary exploitation workflow.
- 030 Format string writes Learn Format string writes through a safe, repeatable binary exploitation workflow.
- 031 Integer overflow to memory corruption Learn Integer overflow to memory corruption through a safe, repeatable binary exploitation workflow.
- 032 Use after free concepts Learn Use after free concepts through a safe, repeatable binary exploitation workflow.
- 033 Double free concepts Learn Double free concepts through a safe, repeatable binary exploitation workflow.
- 034 Heap chunk metadata Learn Heap chunk metadata through a safe, repeatable binary exploitation workflow.
- 035 Fastbins overview Learn Fastbins overview through a safe, repeatable binary exploitation workflow.
- 036 Unsorted bin leaks Learn Unsorted bin leaks through a safe, repeatable binary exploitation workflow.
- 037 Tcache basics Learn Tcache basics through a safe, repeatable binary exploitation workflow.
- 038 Tcache poisoning in labs Learn Tcache poisoning in labs through a safe, repeatable binary exploitation workflow.
- 039 House of force concepts Learn House of force concepts through a safe, repeatable binary exploitation workflow.
- 040 House of spirit concepts Learn House of spirit concepts through a safe, repeatable binary exploitation workflow.
- 041 Heap grooming workflow Learn Heap grooming workflow through a safe, repeatable binary exploitation workflow.
- 042 One gadget constraints Learn One gadget constraints through a safe, repeatable binary exploitation workflow.
- 043 RELRO and GOT overwrite limits Learn RELRO and GOT overwrite limits through a safe, repeatable binary exploitation workflow.
- 044 Seccomp filter review Learn Seccomp filter review through a safe, repeatable binary exploitation workflow.
- 045 Pwntools process workflow Learn Pwntools process workflow through a safe, repeatable binary exploitation workflow.
- 046 Pwntools remote workflow Learn Pwntools remote workflow through a safe, repeatable binary exploitation workflow.
- 047 GDB and pwndbg workflow Learn GDB and pwndbg workflow through a safe, repeatable binary exploitation workflow.
- 048 Core dump analysis Learn Core dump analysis through a safe, repeatable binary exploitation workflow.
- 049 Fuzzing harness basics Learn Fuzzing harness basics through a safe, repeatable binary exploitation workflow.
- 050 AFL crash triage Learn AFL crash triage through a safe, repeatable binary exploitation workflow.
- 051 Symbol stripping and debugging Learn Symbol stripping and debugging through a safe, repeatable binary exploitation workflow.
- 052 Writing exploit notes safely Learn Writing exploit notes safely through a safe, repeatable binary exploitation workflow.