CSE363: Offensive Security, Spring 2019

Ethics

Recommended Reading

About Penetration Testing
Markets for Zero-Day Exploits: Ethics and Implications
Cybercrime: An Overview of the Federal Computer Fraud and Abuse Statute and Related Federal Criminal Laws

Network Sniffing

Recommended Reading

tcpdump
Wireshark
Scapy

Network Traffic Interception

Recommended Reading

Transport Layer Security (TLS)
Deep dive into QUANTUM INSERT
Hold-On: Protecting Against On-Path DNS Poisoning
sslstrip
Ettercap

Network Traffic Interception (Cont.)

Reconnaissance

Recommended Reading

nmap
The Art of Port Scanning

x86 101

Recommended Reading

Intel® 64 and IA-32 Architectures Software Developer Manuals
x86 Assembly
Introduction to x64 Assembly
Gustavo Duarte's Software Illustrated blog posts
NASM Assembly Language Tutorials
Computer Science from the Bottom Up

Reverse Engineering

Recommended Reading

Introduction to Reverse Engineering Win32 Applications
Reverse Engineering for Beginners
How main() is executed on Linux
Reverse Engineering Challenges
System V Application Binary Interface
radare

No Class

Reverse Engineering

Reverse Engineering

Software Vulnerabilities

Recommended Reading

Low-level Software Security: Attacks and Defenses
Heap Exploitation Part 1: Understanding the Glibc Heap Implementation
Format String Attacks
Vudo malloc tricks
Once upon a free()...
Basic Integer Overflows

Memory Corruption

Recommended Reading

Smashing The Stack For Fun And Profit
Tao of Windows Buffer Overflow
The Internet Worm Program: An Analysis
Crash course on buffer overflows by the 10K Students initiative
Using GDB to Develop Exploits - A Basic Run Through

Memory Corruption

No Class: Spring Recess

No Class: Spring Recess

No Class

Memory Corruption

Recommended Reading

Getting around non-executable stack (and fix)
non-exec stack
The advanced return-into-lib(c) exploits: PaX case study
x86-64 buffer overflow exploits and the borrowed code chunks exploitation technique
Return-Oriented Programming: Systems, Languages, and Applications

Vulnerability Discovery

Recommended Reading

Fuzz Testing of Application Reliability
Static Source Code Analysis Tools for C
Generating Software Tests
Awesome Fuzzing
American Fuzzy Lop
Automated vulnerability auditing in machine code
Dynamic Program Analysis and Software Exploitation: From the crash to the exploit code
Cyber Grand Shellphish

No Class

Exploitation

Recommended Reading

Metasploit
Metasploit Wiki
Metasploit Unleashed

Post-exploitation

Recommended Reading

Remote Exec
Attacking NTLM with Precomputed Hashtables
Post Exploitation Wiki
Post Exploitation Using Meterpreter
Hack Back! A DIY Guide

Malware

Recommended Reading

The Art of Computer Virus Research and Defense
How to 0wn the Internet in Your Spare Time
Manufacturing Compromise: The Emergence of Exploit-as-a-Service
Evasive Malware Exposed and Deconstructed
NTIllusion: A portable Win32 userland rootkit
A Catalog of Windows Local Kernel-mode Backdoor Techniques

Malware

Recommended Reading

W32.Stuxnet Dossier
Stuxnet 0.5:The Missing Link
W32.Duqu: The precursor to the next Stuxnet
THE DUQU 2.0: Technical Details

Social Engineering

Recommended Reading

The Social Engineering Framework
Advanced social engineering attacks
People Hacking: The Psychology of Social Engineering

Web Exploitation

App Isolation: Get the Security of Multiple Browsers with Just One
One-Way Web Hacking
35 Pentesting Tools Used for Web Vulnerability Assessment
CGI Security Holes
NT Web Technology Vulnerabilities
Perl CGI problems

Physical Security

Recommended Reading

Notes on Picking Pin Tumbler Locks
RFID Hacking
Hacking deeper in the system
Thunderclap: Exploring Vulnerabilities in Operating System IOMMU Protection via DMA from Untrustworthy Peripherals
iOS Security Guide

OPSEC

Security guides you should read and follow
OPSEC Required Reading
Tails
PORTAL

Project Presentations

Project Presentations