Differences
This shows you the differences between two versions of the page.
|
cns:lectures:lecture-09 [2013/12/02 12:11] razvan.deaconescu |
cns:lectures:lecture-09 [2019/12/07 14:08] (current) razvan.deaconescu |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== Lecture 09 - Permissions and Privileges ====== | + | ====== Lecture 09 - Code Reuse (part 2) ====== |
| - | * [[http://elf.cs.pub.ro/cns/res/lectures/lecture-09.pdf | Slides]] | + | * [[http://elf.cs.pub.ro/cns/res/lectures/09-code-reuse-2-handout.pdf|Slides]] |
| - | * **Keywords**: permissions, privilege, access control, UID, GID, DAC, ''umask'', sticky bit, set-user-ID bit, set-group-ID bit, UID, EUID, SSUID, ''CAP_SETUID'', ''setuid'', ''setuid'', ''setresuid'' | + | * **Keywords**: multi-phase attack, ASLR bypass, ROP chain, stack pivoting |
| <html> | <html> | ||
| - | <iframe src="http://docs.google.com/viewer?url=http://elf.cs.pub.ro/cns/res/lectures/lecture-09.pdf&embedded=true" width="600" height="470" style="border: none;"></iframe> | + | <center> |
| + | <iframe src="https://docs.google.com/viewer?url=http://elf.cs.pub.ro/cns/res/lectures/09-code-reuse-2-handout.pdf&embedded=true" width="600" height="470" style="border: none;"></iframe> | ||
| + | </center> | ||
| </html> | </html> | ||
| + | ===== Demo ===== | ||
| + | |||
| + | [[http://elf.cs.pub.ro/oss/res/lectures/09-code-reuse-2-demo.zip|Demo archive]] | ||
| + | |||
| + | /* | ||
| + | |||
| + | ====== Lecture 09 - Strings ====== | ||
| + | |||
| + | * [[http://elf.cs.pub.ro/cns/res/lectures/lecture-09.pdf | Slides]] | ||
| + | * **Keywords**: string, character, ''char'', ''signed char'', ''unsigned char'', NTBS, null character, character operators, string operations, bounds, overflow, truncation, sanitization, ''gets'', exploit, input validation, memory model, | ||
| + | |||
| + | <html> | ||
| + | <center> | ||
| + | <iframe src="https://docs.google.com/viewer?url=http://elf.cs.pub.ro/cns/res/lectures/lecture-09.pdf&embedded=true" width="600" height="470" style="border: none;"></iframe> | ||
| + | </center> | ||
| + | </html> | ||
| + | */ | ||
