Format String Vulnerabilities

Format String Vulnerabilities, available at $49.99, has an average rating of 4.55, with 19 lectures, 1 quizzes, based on 21 reviews, and has 219 subscribers.

You will learn about Students will learn practical format string vulnerability concepts for x64 processors Students will learn how to leak memory addresses using format string vulnerabilities on Linux for x64 processors Students will learn how to bypass stack canaries on Linux for x64 processors Students will learn advanced Linux Binary Exploitation concepts Students will learn how to use pwntools binary exploitation framework This course is ideal for individuals who are Bug bounty hunters or CTF Players or Penetration testers or Security Auditors or Red Team Operators or Anyone interested in security. It is particularly useful for Bug bounty hunters or CTF Players or Penetration testers or Security Auditors or Red Team Operators or Anyone interested in security.

Enroll now: Format String Vulnerabilities

Summary

Title: Format String Vulnerabilities

Price: $49.99

Average Rating: 4.55

Number of Lectures: 19

Number of Quizzes: 1

Number of Published Lectures: 19

Number of Published Quizzes: 1

Number of Curriculum Items: 20

Number of Published Curriculum Objects: 20

Original Price: $89.99

Quality Status: approved

Status: Live

What You Will Learn

Students will learn practical format string vulnerability concepts for x64 processors
Students will learn how to leak memory addresses using format string vulnerabilities on Linux for x64 processors
Students will learn how to bypass stack canaries on Linux for x64 processors
Students will learn advanced Linux Binary Exploitation concepts
Students will learn how to use pwntools binary exploitation framework

Who Should Attend

Bug bounty hunters
CTF Players
Penetration testers
Security Auditors
Red Team Operators
Anyone interested in security.

Target Audiences

Bug bounty hunters
CTF Players
Penetration testers
Security Auditors
Red Team Operators
Anyone interested in security.

This course teaches exploit development concepts for Linux (x86_64) and it is specifically focused on format string vulnerabilities. This course begins by introducing students to the format string concepts on Linux x86_64 platform (though the concepts remain the same on other architectures too). We will slowly gear towards understanding how format string vulnerabilities can be leveraged to exploit other vulnerabilities such as Buffer Overflows. This is clearly taught in the course by showing various practical examples such as bypassing stack canaries and bypassing ASLR. This is an entry level to intermediate level course and we encourage you to take this course if you are interested to learn exploit development concepts surrounding format string vulnerabilities and memory leaks specifically for 64 bit intel processors. However, remember that the course involves a lot of assembly language and debugging using a debugger. So, you need patience and passion to learn the concepts taught in the course. This course makes use of a variety of techniques on exploit development and brace yourself if you are willing to learn by sitting in front of a computer. After successfully completing this course, you will be ready to attempt several industry leading practical cyber security certification exams.

Course Curriculum

Chapter 1: Course Introduction

Lecture 1: Course Introduction

Chapter 2: Course Downloads

Lecture 1: Course Downloads

Chapter 3: Introduction to format strings

Lecture 1: Lab setup

Lecture 2: Introduction

Lecture 3: Format Specifiers

Lecture 4: How print functions work

Lecture 5: Unusual usage of printf

Lecture 6: Dangers of format string vulnerabilities

Chapter 4: Exploiting Format String Vulnerabilities

Lecture 1: Leaking strings from memory

Lecture 2: Causing DOS using format string vulnerabilities

Lecture 3: Introduction to Stack Canaries

Lecture 4: Stack Canary Bypass – Part 1 (Introduction to pwntools)

Lecture 5: Stack Canary Bypass – Part 2 (Manually leaking stack canary)

Lecture 6: Stack Canary Bypass – Part 3 (Find offset of Stack Canary)

Lecture 7: Stack Canary Bypass – Part 4 (Find offset of RIP)

Lecture 8: Stack Canary Bypass – Final Exploit Part 1

Lecture 9: Stack Canary Bypass – Final Exploit Part 2

Chapter 5: Course Conclusion

Lecture 1: Conclusion

Chapter 6: Bonus Section

Lecture 1: Bonus Lecture

Instructors

Srinivas .
Your instructor

Rating Distribution

1 stars: 0 votes
2 stars: 0 votes
3 stars: 2 votes
4 stars: 8 votes
5 stars: 11 votes

Frequently Asked Questions

How long do I have access to the course materials?

You can view and review the lecture materials indefinitely, like an on-demand channel.

Can I take my courses with me wherever I go?

Definitely! If you have an internet connection, courses on Udemy are available on any device at any time. If you don’t have an internet connection, some instructors also let their students download course lectures. That’s up to the instructor though, so make sure you get on their good side!

Menu