Hack5: Exploit Development

Special aspects of hidden target platforms

• Processor architecture: x86
• Operating systems: Windows, Unix/Linux

Different forms of vulnerability analysis

• Static code analysis
  • Source code analysis
  • Analysis of binary programs (reverse code engineering)
• Dynamic code analysis (runtime analysis)
  • Behavior-based security analysis
  • Fuzzing

Tools of the Trade: Important tools for exploit development

• Debuggers/disassemblers/exploit frameworks/ assemblers (x86)
• Programming language of choice (e.g. C/C++, Python, Perl, Ruby, etc.)

Exploitation of different vulnerability types

• Errors in the hardware architecture, software architecture and application logic
• Errors in data processing, e.g.
• Buffer overflow vulnerabilities (stack, heap, off-by-one)
• Format string vulnerabilities

Protection measures and workarounds

• Stack cookies
• SafeSEH
• Data execution prevention (DEP)
• Address space layout randomization (ASLR)

Technical requirements

Basic knowledge of operating systems and computer architecture

Duration

Two days