|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/hands-on-exploit-development-advanced/
课程评论：没有评论
**Coursera 课程《Hands-on Fuzzing and Exploit Development (Advanced)》中文内容摘要** 本课程是《Hands-on Exploit Development on Udemy》的进阶版，专注于教授缓冲区溢出漏洞的高级利用技术。课程涵盖了多种核心概念和工具，旨在通过六个阶段的漏洞利用开发流程，为学员提供一套完整的实践指南。 **核心内容与技术：** * **模糊测试 (Fuzzing):** 课程从识别漏洞开始，详细介绍服务器模糊测试（使用 **Spike**）和文件格式模糊测试（使用 **Peach Fuzzer**）。学员将学习如何利用这些工具来发现潜在的漏洞。 * **漏洞利用开发 (Exploit Development):** * **概念与流程:** 课程严格遵循漏洞利用开发的六个阶段，对每个阶段进行深入的讲解和演示。 * **高级利用技术:** 重点教授如 Egg Hunters、ASLR (Address Space Layout Randomization) 旁路、Stack Pivoting（栈偏移）、Function Reuse（函数重用）以及手动编码等高级利用技巧。 * **从 PoC 到 Exploit:** 学员将学习如何创建 Proof of Concept（概念验证）来触发漏洞，并将其转化为一个可行的利用程序。 * **常用工具介绍与实践:** * **调试与分析:** **Immunity Debugger** 及其强大的 **Mona 库** * **漏洞利用框架:** **Metasploit** * **Payload 生成:** **msfvenom** * **模糊测试工具:** **Spike**, **Peach Fuzzer**, **BooFuzz** 等。 * **学习体验:** * **实战导向:** 课程强调实践操作，学员可以跟随视频直接动手创建有效的漏洞利用程序。 * **资源丰富:** 每个视频都配有学习资源，包括 PDF 课件、模糊测试脚本、Peach Pit Python 脚本等，便于学员学习和复现。 * **精炼高效:** 课程内容短小精悍，但包含丰富的实用知识。 **学员反馈亮点：** * 易于理解和跟随，尤其适合初学者掌握缓冲区溢出基础。 * 介绍了更多实用的模糊测试工具，拓宽了学习视野。 总而言之，本课程为希望深入了解和掌握缓冲区溢出漏洞利用技术的学习者提供了一个全面、实用的学习平台。
About this courseThis course builds upon my previous course, Hands-on Exploit Development on Udemy. It will teach you advanced techniques of exploiting a buffer overflow vulnerability. Egg hunters, ASLR bypass, Stack Pivoting, Function Reuse, Manual encoding are some of the techniques covered in this course. It follows the six stages of exploit development and gives a detailed walk-through of each. Each module starts by identifying the vulnerability via fuzzing. You'll learn, server fuzzing (using Spike) and file format fuzzing (using Peach Fuzzer). It then shows you how to create a PoC to trigger the vulnerability and convert that PoC into a working exploit. Through this course you will get introduced to various tools such as Immunity Debugger, Mona library for Immunity Debugger, Metasploit, msfvenom, Spike, Peach Fuzzer, BooFuzz and much more. This course is designed to be short and concise yet packed with practical knowledge. Each video includes learning resources (in video) and associated files (pdf slides, fuzzing scripts, peach pit python script etc.). You can just follow along and create a working exploit. It's that simple. Happy hacking! What our fellow students say about this course"I have been looking for resources to learn different techniques of exploit development. This course was a great find. It is very easy to follow along and understand the concepts." - Surbhi Goel"Great! More fuzzing tools are introduced." - Ying-Chen Chiou"pretty good basics,easy to follow buffer overflow" - Arun Mathew
