Exploit Development from Scratch

Exploit Development from Scratch

Progressive exploit development course with 30 exercises:

n
• Module 1: Fundamentos — Arquitectura x86/x64, calling conventions, stack layout, GDB/WinDbg basics.
n
• Module 2: Stack overflows — Classic BOF, SEH overwrite, egghunting, shellcode writing from scratch.
n
• Module 3: Heap exploitation — Use-after-free, double free, heap spray, tcache poisoning (glibc).
n
• Module 4: Mitigations bypass — DEP/NX bypass (ROP), ASLR bypass (info leak), CFG bypass, stack canary bypass.
n
• Module 5: Windows specifics — Win32 shellcode, token stealing, kernel pool overflow basics.
n
• Module 6: Fuzzing — AFL++, libFuzzer, WinAFL. Crash triage, root cause analysis, PoC development.
n
• Formato: PDFs by module, binarios vulnerables, solutions, Docker/VM for each module.
n