Common vulnerability exploitation techniques in Linux (Training ppt + instance + exp), pptexp

Common vulnerability exploitation techniques in Linux (Training ppt + instance + exp), pptexp

 

I remember I wrote an article in drops called linux common vulnerability exploitation technical practices, now you can also find (https://woo.49.gs/static/drops/binary-6521.html ),

However, when pwn was started, many understandings were biased.

It has been more than a year since now, and some friends often send private messages asking me that the instance program is still absent. Unfortunately, I have not had it myself :)

 

Not long ago, I had to give this training to others. So I wrote this ppt, and I had some superficial understandings of myself. I would like to share it with you,

 

In the ppt, I attached an instance and corresponding exp to each technology. They were all packaged together.

 

I have referenced some content from my predecessors and thank you for sharing them.

 

My contact information is available in the ppt. You are welcome to contact me.

 

The content outline is listed below

1. Use of common tools
1 IDA
2 gdb
3 peda
4 rp ++, ROPGadget
5 pwntools
6 libcdb.com, libc-database
7. built-in gadgets
2 procedures
3 common vulnerability types
1 Stack Overflow
2. String Formatting Vulnerability
3 integer Vulnerability
4 heap Vulnerabilities
1 Heap Overflow
2 double free
3 UAF
4 others
4. Common defense technologies and bypassing Methods
1 Canary
2 NX
3 ASLR
4 RELRO
5 PIE
5. Other notes

 

Link: http://pan.baidu.com/s/1gePL9ib password: nvhf