Exploit Development from Scratch

Exploit Development from Scratch

Curso progresivo de desarrollo de exploits con 30 ejercicios:

• Módulo 1: Fundamentos — Arquitectura x86/x64, calling conventions, stack layout, GDB/WinDbg basics.
• Módulo 2: Stack overflows — Classic BOF, SEH overwrite, egghunting, shellcode writing from scratch.
• Módulo 3: Heap exploitation — Use-after-free, double free, heap spray, tcache poisoning (glibc).
• Módulo 4: Mitigations bypass — DEP/NX bypass (ROP), ASLR bypass (info leak), CFG bypass, stack canary bypass.
• Módulo 5: Windows specifics — Win32 shellcode, token stealing, kernel pool overflow basics.
• Módulo 6: Fuzzing — AFL++, libFuzzer, WinAFL. Crash triage, root cause analysis, PoC development.
• Formato: PDFs por módulo, binarios vulnerables, soluciones, Docker/VM para cada módulo.