Binary Exploitation

Resources

Articles

• Defcon Quals: babyecho (format string vulns in gory detail) - Ron Bowes, SkullSecurity

• Exploit 101 - Format Strings - Alexandre Cheron

• Exploiting Format String Vulnerabilities - team teso

• FAQ: The tragedy of low-level exploitation - Gynvael Coldwind

• Getting Started with Exploit Development - DAY[0]

• How to Learn Binary Exploitation Roadmap - Roppers Academy

Courses

• CS6265: Information Security Lab - Georgia Tech

GitHub Repositories

• BinExp - Linux Binary Exploitation

• CTF-Workshop - Challenges for Binary Exploitation Workshop

• ROPgadget Tool

Tools

• pestudio - malware initial assessment

Websites

• Binary Exploitation Notes - Andrej Ljubic

• pwn.college

Wikipedia Articles

• Address space layout randomization

• Buffer overflow

• Buffer overflow protection

• Call stack

• Heap overflow

• NOP slide

• NX bit

• Return-oriented programming

• Return-to-libc attack

• Shellcode

• Stack buffer overflow

• Uncontrolled format string

YouTube Playlists

• Binary Exploitation / Memory Corruption - LiveOverflow

• Binary Exploitation PWN101 - RazviOverflow