ASLR Courses and Certifications

OpenSecurityTraining2

Exploits 2 - Windows Exploit Mitigations and DEP/ASLR/SafeSEH Bypass Techniques

Master Windows exploit techniques by defeating security mitigations like DEP, ASLR, and SafeSEH through hands-on labs and practical demonstrations.

• YouTube
• 10 hours 44 minutes
• On-Demand
• Free Video

DEFCONConference

Can't Stop the ROP - Automating Universal ASLR Bypasses

Discover nine novel bypasses of Windows high-entropy ASLR using simple ROP gadgets, expanding attack surfaces and enabling previously impossible exploits with automated tools.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Exploit Development for Linux (x86)

201 ratings at Udemy

Learn exploit development the right way to crack CTFs and the toughest cyber security certification exams out there

• Udemy
• 6 hours 56 minutes
• On-Demand
• Paid Course

Exploit Development for Linux x64

60 ratings at Udemy

Learn x64 Linux exploit development the right way to crack CTFs and the toughest certification exams out there

• Udemy
• 5 hours 35 minutes
• On-Demand
• Paid Course

Black Hat

Silently Breaking ASLR in the Cloud

Exploit memory deduplication to defeat ASLR in cloud environments, leaking randomized base addresses of libraries and executables in neighboring VMs using a side-channel attack.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Association for Computing Machinery (ACM)

Prefetch Side-Channel Attacks - Bypassing SMAP and Kernel ASLR

Explore novel prefetch side-channel attacks that bypass SMAP and Kernel ASLR, presented by security researchers at CCS 2016. Gain insights into advanced cybersecurity vulnerabilities and mitigation strategies.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Black Hat

A New Method to Bypass 64-bit Linux ASLR

Explore a novel ASLR bypass technique for 64-bit Linux systems using "return-to-csu", applicable to any application due to its use of silently attached code.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Black Hat

Abusing Performance Optimization Weaknesses to Bypass ASLR

Explore vulnerabilities in performance-oriented software designs that can bypass ASLR, focusing on hash table implementations and Android's Zygote process creation model. Includes real-world attack demonstrations.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Ekoparty Security Conference

Exec ASLR - Abusing Intel Branch Predictors to Bypass ASLR

Explore a new Spectre v2 technique to bypass ASLR on Intel CPUs by abusing branch predictors, with demos on x86 internals, side-channel attacks, and speculative execution.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

OpenSecurityTraining2

The Life of Binaries - PE and ELF File Format Analysis 2013

Dive into PE and ELF binary formats through hands-on analysis, exploring headers, imports, exports, and dynamic linking with interactive scavenger hunt exercises.

• YouTube
• 9 hours 38 minutes
• On-Demand
• Free Video

media.ccc.de

A Systematic Evaluation of OpenBSD's Mitigations

Systematic evaluation of OpenBSD's security mitigations, analyzing effectiveness, performance impact, and potential bypasses. Provides rational assessment of the operating system's security claims.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Linux Kernel Debugging Tricks of the Trade

Explore advanced Linux Kernel debugging techniques, tools, and best practices with Google engineer Joel Fernandes. Learn to tackle complex issues and enhance development efficiency.

• YouTube
• 1 hour 31 minutes
• On-Demand
• Free Video

Black Hat

WebKit Everywhere - Secure or Not?

Explore WebKit security, vulnerabilities, and exploitation techniques across platforms. Learn about security enhancements, mitigation strategies, and advanced exploit methods with real-world demos.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Black Hat

Investigating and Breaking Widevine on QTEE

Explore vulnerabilities in Widevine DRM on Qualcomm's QTEE, uncovering security flaws and exploiting them to extract sensitive data from trusted storage. Learn advanced techniques in reverse engineering and exploit development.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

linux.conf.au

Security Vulnerability Mitigations

Explore security vulnerability mitigations, from classic buffer overflows to modern ROP attacks. Learn about OpenBSD's innovative defenses and their adoption across platforms.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk