CSE363: Schedule

Schedule

Recommended reading material is listed under each lecture.

Mon 1/27

Introduction and Basic Concepts

Why Offensive Security Needs Engineering Textbooks
Hacker Curriculum

Wed 1/29

Ethics

About Penetration Testing
Markets for Zero-Day Exploits: Ethics and Implications
Cybercrime: An Overview of the Federal Computer Fraud and Abuse Statute and Related Federal Criminal Laws
Policy and Disclosure: 2020 Edition

Mon 2/3

Network Sniffing

tcpdump
Wireshark
Scapy

Wed 2/5

Network Traffic Interception

Transport Layer Security (TLS)
Deep dive into QUANTUM INSERT
Hold-On: Protecting Against On-Path DNS Poisoning
sslstrip
Bettercap
Performing & Preventing SSL Stripping: A Plain-English Primer

Mon 2/10

Network Traffic Interception

Wed 2/12

Network Traffic Interception

Mon 2/17

Reconnaissance

nmap
The Art of Port Scanning

Wed 2/19

x86 101

Intel® 64 and IA-32 Architectures Software Developer Manuals
x86 Assembly
Introduction to x64 Assembly
Gustavo Duarte's Software Illustrated blog posts
NASM Assembly Language Tutorials
Computer Science from the Bottom Up

Mon 2/24

Reverse Engineering

Introduction to Reverse Engineering Win32 Applications
Reverse Engineering for Beginners
How main() is executed on Linux
Reverse Engineering Challenges
System V Application Binary Interface
Malware-Analysis-Training
radare

Wed 2/26

Reverse Engineering

Mon 3/2

Reverse Engineering

Wed 3/4

Software Vulnerabilities

Low-level Software Security: Attacks and Defenses
OWASP: Vulnerabilities
Heap Exploitation Part 1: Understanding the Glibc Heap Implementation
Format String Attacks
Vudo malloc tricks
Once upon a free()...
Basic Integer Overflows

Mon 3/9

Memory Corruption

Smashing The Stack For Fun And Profit
Tao of Windows Buffer Overflow
The Internet Worm Program: An Analysis
Crash course on buffer overflows by the 10K Students initiative
Using GDB to Develop Exploits - A Basic Run Through

Wed 3/11

Memory Corruption

Mon 3/16

No Class: Spring Recess

Wed 3/18

No Class: Spring Recess

Mon 3/23

No Class: Spring Recess

Wed 3/25

No Class: Spring Recess

Mon 3/30

Memory Corruption

Getting around non-executable stack (and fix)
non-exec stack
The advanced return-into-lib(c) exploits: PaX case study
x86-64 buffer overflow exploits and the borrowed code chunks exploitation technique
Return-Oriented Programming: Systems, Languages, and Applications
Just-In-Time Code Reuse: On the Effectiveness of Fine-Grained Address Space Layout Randomization

Wed 4/1

Vulnerability Discovery

Fuzz Testing of Application Reliability
Undefined Behavior in 2017
Generating Software Tests
Static Source Code Analysis Tools for C
Awesome Fuzzing
American Fuzzy Lop
Automated vulnerability auditing in machine code
Dynamic Program Analysis and Software Exploitation: From the crash to the exploit code
Cyber Grand Shellphish

Mon 4/6

Exploitation

Metasploit
Metasploit Wiki
Metasploit Unleashed

Wed 4/8

Post-exploitation

Remote Exec
Attacking NTLM with Precomputed Hashtables
Post Exploitation Wiki
Post Exploitation Using Meterpreter
Windows Privilege Escalation Fundamentals
Active Directory Attacks
Active Directory Kill Chain Attack & Defense
Hack Back! A DIY Guide

Mon 4/13

No Class

Wed 4/15

Malware

The Art of Computer Virus Research and Defense
How to 0wn the Internet in Your Spare Time
Manufacturing Compromise: The Emergence of Exploit-as-a-Service
Evasive Malware Exposed and Deconstructed
The Inside Story Behind MS08-067
NTIllusion: A portable Win32 userland rootkit
A Catalog of Windows Local Kernel-mode Backdoor Techniques

Mon 4/20

Malware

W32.Stuxnet Dossier
Stuxnet 0.5:The Missing Link
W32.Duqu: The precursor to the next Stuxnet
THE DUQU 2.0: Technical Details

Wed 4/22

No Class

Mon 4/27

Social Engineering

The Social Engineering Framework
Advanced social engineering attacks
People Hacking: The Psychology of Social Engineering

Wed 4/29

Web Exploitation

App Isolation: Get the Security of Multiple Browsers with Just One
One-Way Web Hacking
35 Pentesting Tools Used for Web Vulnerability Assessment
CGI Security Holes
NT Web Technology Vulnerabilities
Perl CGI problems

Mon 5/4

Physical Security

Notes on Picking Pin Tumbler Locks
RFID Hacking
Hacking deeper in the system
Thunderclap: Exploring Vulnerabilities in Operating System IOMMU Protection via DMA from Untrustworthy Peripherals
State Considered Harmful
Apple Platform Security

Wed 5/6

OPSEC

Security guides you should read and follow
OPSEC Required Reading
Tails
PORTAL