This shows you the differences between two versions of the page.
cns:lectures:lecture-07 [2013/11/17 17:15] razvan.deaconescu |
cns:lectures:lecture-07 [2019/11/11 09:28] (current) razvan.deaconescu |
||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== Lecture 07 - Encryption. Hashing. APIs ====== | + | ====== Lecture 07 - Strings. Information Leaks ====== |
+ | |||
+ | * [[http://elf.cs.pub.ro/cns/res/lectures/07-strings-leaks-handout.pdf | Slides]] | ||
+ | * **Keywords**: string, character, ''char'', ''signed char'', ''unsigned char'', NTBS, null character, character operators, string operations, bounds, overflow, truncation, sanitization, ''gets'', exploit, input validation, memory model, | ||
+ | |||
+ | <html> | ||
+ | <center> | ||
+ | <iframe src="https://docs.google.com/viewer?url=http://elf.cs.pub.ro/cns/res/lectures/07-strings-leaks-handout.pdf&embedded=true" width="600" height="470" style="border: none;"></iframe> | ||
+ | </center> | ||
+ | </html> | ||
+ | |||
+ | /* | ||
+ | |||
+ | ====== Lecture 07 - Exploiting. Shellcodes (part 2) ====== | ||
* [[http://elf.cs.pub.ro/cns/res/lectures/lecture-07.pdf | Slides]] | * [[http://elf.cs.pub.ro/cns/res/lectures/lecture-07.pdf | Slides]] | ||
- | * **Keywords**: encryption, symmetric encryption, public key encryption, digital signatures, hash, fingerprinting, certificate, MAC, openssl, gnutls, crypt, libgcrypt, botan, side channel attack | + | * **Keywords**: shellcode data, jump-call trick, alphanumeric shellcode, environment variable, string format attack, return-to-libc, pwntools, shellcraft, data packing, pwntools tubes |
<html> | <html> | ||
- | <iframe src="http://docs.google.com/viewer?url=http://elf.cs.pub.ro/cns/res/lectures/lecture-07.pdf&embedded=true" width="600" height="470" style="border: none;"></iframe> | + | <center> |
+ | <iframe src="https://docs.google.com/viewer?url=http://elf.cs.pub.ro/cns/res/lectures/lecture-07.pdf&embedded=true" width="600" height="470" style="border: none;"></iframe> | ||
+ | </center> | ||
</html> | </html> | ||
+ | */ |