|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/format-string-vulnerabilities/
课程评论：没有评论
课程名称：格式字符串漏洞 课程概述：本课程教授Linux（x86_64）平台上的漏洞开发概念，特别专注于格式字符串漏洞。课程首先介绍格式字符串在Linux x86_64平台上的基本概念，尽管这些概念在其他架构上也是适用的。随着课程的深入，学生将逐步理解格式字符串漏洞如何被利用，以攻击其他类型的漏洞，如缓冲区溢出。课程中通过多种实用案例展示了如何绕过栈保护（stack canaries）和地址空间布局随机化（ASLR）。 本课程适合初学者到中级水平的学习者，特别是对格式字符串漏洞和内存泄露的漏洞开发概念感兴趣的学生。需要注意的是，课程涉及大量汇编语言和调试，因此需要耐心和热情来掌握所教授的概念。课程使用多种技术进行漏洞开发，准备好在电脑前认真学习。 完成本课程后，学员将能够尝试多个行业领先的实用网络安全认证考试。
This course teaches exploit development concepts for Linux (x86_64) and it is specifically focused on format string vulnerabilities. This course begins by introducing students to the format string concepts on Linux x86_64 platform (though the concepts remain the same on other architectures too). We will slowly gear towards understanding how format string vulnerabilities can be leveraged to exploit other vulnerabilities such as Buffer Overflows. This is clearly taught in the course by showing various practical examples such as bypassing stack canaries and bypassing ASLR. This is an entry level to intermediate level course and we encourage you to take this course if you are interested to learn exploit development concepts surrounding format string vulnerabilities and memory leaks specifically for 64 bit intel processors. However, remember that the course involves a lot of assembly language and debugging using a debugger. So, you need patience and passion to learn the concepts taught in the course. This course makes use of a variety of techniques on exploit development and brace yourself if you are willing to learn by sitting in front of a computer. After successfully completing this course, you will be ready to attempt several industry leading practical cyber security certification exams.
