Curriculum
Course Content
4 items · 1 sections
- 01 ASLR and address randomisation
- 02 Information disclosure and address leaks
- 03 Resolving module bases
- 04 Combining a leak with ROP
OSED
Advanced
Certificate
ASLR Bypass
Defeating address randomisation, the second mitigation EXP-301 tackles. How ASLR randomises addresses, why an information disclosure is the usual answer, using an address leak to find a module base, and combining a leak with ROP into a reliable exploit.
Skills
What You Will Learn in This Course
Explain ASLR and address randomisation.
Use an information disclosure to leak an address.
Resolve a module base from a leak.
Combine a leak with ROP for a reliable exploit.
About This Course
Defeating address randomisation, the second mitigation EXP-301 tackles. How ASLR randomises addresses, why an information disclosure is the usual answer, using an address leak to find a module base, and combining a leak with ROP into a reliable exploit.
Requirements
- DEP bypass.
Who It Is For
- OSED-track researchers.
Certified
Certificates You Can Earn
Finish your course and receive an accredited MotiGraph certificate you can add to your CV and share with employers.
