|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/linux-heap-exploitation-part-3/
课程评论：没有评论
课程名称：Linux Heap Exploitation - Part 3 课程概述：本课程是HeapLAB Part 2的延续，建议在开始之前先完成Part 2的学习。HeapLAB Part 3延续了实践性的堆利用技术，并引入了更多新的技巧。本课程被标记为“专家级”，与之前的“中级”内容相比，期待学员能够更自主地进行学习，例如需要浏览GLIBC源代码寻找漏洞。课程中将学习多种浏览代码的方法。 本课程将重点探索堆利用的一个新领域——腐蚀之屋（House of Corrosion），这是一个较为复杂的主题，但我们相信你已经准备好了！此外，我们将深入研究mmap分配的内存块，了解多线程的malloc工作原理，绕过“安全链接”的漏洞缓解措施，以及在查找GLIBC漏洞的过程中进行利用。课程中还提供了数个挑战性二进制文件供你测试新技能，更新的PDF资料包含最新的技术与缓解措施，还有改进过的测试环境支持多线程和mallopt选项！ 请务必观看环境设置视频，即使你已经在Part 2中建立了漏洞开发环境，也需要安装额外的工具以便跟好课程进度。准备好迎接挑战吧！
This is a continuation of the HeapLAB Part 2 course, a.k.a Linux Heap Exploitation - Part 2.If you haven't taken the above course, I highly recommend you do so before embarking on this one.HeapLAB Part 3 is the same hands-on, practical heap exploitation, just with more new techniques for you to learn!This part of the course is considered "Expert", whereas the previous parts were labelled "Intermediate", that's because I'm expecting more autonomy from you this time, for example you'll be browsing the GLIBC source code in search of bugs. Don't worry though, we're going to learn a few different ways of browsing that code first.We're covering just one more "House" of heap exploitation, know as the House of Corrosion. It's complicated but I know you're ready! We'll also be exploiting mmapped chunks, learning how multithreaded malloc works, bypassing the "Safe Linking" exploit mitigation and exploiting any GLIBC bugs we find along the way. There are also a couple more challenge binaries for you to test your new skills against, an updated PDF with all the latest techniques and mitigations, and an improved malloc testbed with multithreading and mallopt options!Make sure you watch the Environment Setup video, even if you already have an exploit development environment set up from Part 2, you'll need to install one more tool so that you can follow along.Hack the planet!
