Advanced Assembly & Exploitation

Introduction

• Numeral systems (Oct, Hex, Dec, Bin), 2’s complement, divisibility, boolean functions (OR, AND, NOR, NAND, XOR), boolean algebra, DeMorgan’s Theorems, Karnaugh maps, Endianness.
• C language recap – I/O, arrays, structs, unions, pointers, memory management, arithmetic, strings.
• Debugging with gdb / VS, symbol tables
• Compiling & Linking – static vs dynamic linking

CPU Design & Architecture

• Segmentation & Virtual Different archs overview, RISC / CISC, Intel x86 and AMD evolution & overview & history
• Architecture of a very simple microcomputer and introduction to assembly language.
• Architecture of the Intel 8086, ASCII Code and 8086 assembly language environment.
• Memory and privilege levels
• User / Kernel mode

Assembly

• x86, x86-64, ARM, MIPS overview
• AT&T vs. Intel Syntax
• Assembler intro
• Data types
• Conditionals, branching
• x86 registers,x86-64 registers, flags, operand types (Intermediate, Register, Memory)
• Arithmetic Operations & expressions
• Functions prologue and epilogue, stack operations & call stack, calling conventions, recursion
• Floating point operations
• Addressing modes

Exploitation

• Disassembly & debugging with objdump & gdb& ollydbg
• PE / ELF / Mach-O – structures, sections, import/export tables, PLT/GOT, resources, etc.
• Stack exploitation
• Stack protections & How to bypass
  • Stack Canary
  • NX-bit (DEP)
    • Return-to-libc attack
    • ROP & Gadgets
  • ASLR
    • Return-to-plt
    • libc address leakage
• Heap management and exploitation
  • Heap overflow
  • Heap spray
  • UAF – Use after free
• Anti-debugging techniques

• Advanced C programming
• Intro to basic Operating Systems mechanisms (Linux & Windows)