Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

The Life of Binaries - PE and ELF File Format Analysis 2013

OpenSecurityTraining2 via YouTube

Overview

Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
Explore the intricate world of binary file formats through this comprehensive security training course that demystifies how executables are structured and function. Dive deep into the Portable Executable (PE) format used by Windows systems, examining DOS headers, NT headers, file headers, optional headers, section headers, imports, exports, relocations, and security features like code signing and ASLR. Master the analysis of PE components including bound imports, delay load imports, thread local storage, resources, and debug information while practicing with the innovative Binary Scavenger Hunt tool that generates randomized PE binaries for hands-on learning. Transition to understanding the Executable and Linkable Format (ELF) used in Unix-like systems, comparing and contrasting ELF headers, program headers, section headers, and dynamic linking mechanisms with their PE counterparts. Gain practical experience using tools like readelf and Dependency Walker to analyze binary structures, and explore advanced topics including runtime importing, IAT hooking, PLT operations, packers like UPX, and even basic virus construction concepts. Learn through a structured approach that combines theoretical knowledge with interactive exercises, pop quizzes, and laboratory sessions that reinforce understanding of how compilers generate executables and how these binaries operate at the system level.

Syllabus

2013 Day1P1 Life of Binaries: Intro
2013 Day1P2 Life of Binaries: Compilers
2013 Day1P3 Life of Binaries: Executables Overview
2013 Day1P4 Life of Binaries: PE DOS Header
2013 Day1P5 Life of Binaries: PE NT Header, File Header
2013 Day1P6 Life of Binaries: BinHunt Round 1
2013 Day1P7 Life of Binaries: PE NT Header, Optional Header
2013 Day1P8 Life of Binaries: BinHunt Round 2
2013 Day1P9 Life of Binaries: PE Section Headers
2013 Day1P10 Life of Binaries: PE File Header Pop Quiz
2013 Day1P11 Life of Binaries: BinHunt Round 3
2013 Day1P12 Life of Binaries: PE Imports
2013 Day1P13 Life of Binaries: BinHunt Round 4
2013 Day1P14 Life of Binaries: PE Bound Imports
2013 Day1P15 Life of Binaries: PE Optional Header Pop Quiz
2013 Day1P16 Life of Binaries: PE Delay Load Imports
2013 Day1P17 Life of Binaries: PE Delay Load Imports In Debugger
2013 Day1P18 Life of Binaries: BinHunt Round 5
2013 Day2P01 LoB: PE Sections Slide Correction
2013 Day2P02 LoB: Delay Load Imports Correction And Questions
2013 Day2P03 LoB: ASLR Questions
2013 Day2P04 LoB: IAT Hooking Demo
2013 Day2P05 LoB: Day1 Review
2013 Day2P06 LoB: Dependency Walker
2013 Day2P07 LoB: Runtime Importing
2013 Day2P08 LoB: Exports
2013 Day2P09 LoB: ForwardedExports
2013 Day2P10 LoB: BinHunt Round 6
2013 Day2P11 LoB: Debug Information
2013 Day2P12 LoB: Relocations
2013 Day2P13 LoB: Thread Local Storage (TLS)
2013 Day2P14 LoB: Resources
2013 Day2P15 LoB: Load Config
2013 Day2P16 LoB: Code Signing (Security Directory)
2013 Day2P17 LoB: PE to ELF Topic Transition
2013 Day2P18 LoB: ELF Intro
2013 Day2P19 LoB: ELF Header
2013 Day2P20 LoB: Lab - Using readelf to View the ELF Header
2013 Day2P21 LoB: ELF Program (Segment) Headers
2013 Day2P22 LoB: Lab - Compile Hello and Use readelf to View Program Headers
2013 Day2P23 LoB: Graphical Representation of Program (Segment) Headers in Hello
2013 Day2P24 LoB: PopQuiz: ELF Segment vs. PE Section Similarities And Differences
2013 Day2P25 LoB: ELF Section Headers
2013 Day2P26 LoB: Lab - Using readelf to View Section Headers
2013 Day2P27 LoB: PopQuiz: ELF vs. PE Sections Similarities and Differences
2013 Day2P28 LoB: PLT & Dynamic Linking
2013 Day2P29 LoB: Packers
2013 Day2P30 LoB: UPX Packing Example
2013 Day2P31 LoB: Viruses
2013 Day2P32 LoB: BabysFirstPhage.c Code Walkthrough
2013 Day2P33 LoB: Class Conclusion

Taught by

OpenSecurityTraining2

Reviews

Start your review of The Life of Binaries - PE and ELF File Format Analysis 2013

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.