Heap Overflows Courses and Certifications

BSides Budapest IT Security Conference

GLIBC Heap Overflow Vulnerability and Exploitation - CVE-2023-6246

Delve into the mechanics and exploitation of the critical GLIBC heap overflow vulnerability (CVE-2023-6246), exploring privilege escalation techniques and practical heap overflow concepts.

• YouTube
• 34 minutes
• On-Demand
• Free Video

IIT Madras;  NPTEL

Information Security - 5 - Secure Systems Engineering

With the increase in the threat of cyber-security attacks, it is important to develop computer systems that are not only efficient but also secure. This course will discuss various vulnerabilities in systems and mechanisms by which these vulnerabilities…

• Swayam
• 8 weeks
• On-Demand
• Free Online Course

This course will familiarize students with all aspects of reverse engineering (reversing) Linux 32-bit applications for the purposes of locating flaws and developing exploits.

• PentesterAcademy
• On-Demand
• Paid Course

NDC Conferences

Classic Vulnerabilities

Explore classic vulnerabilities in native exploitation, their recent resurgence, and modern tools for detection and prevention in this comprehensive security talk.

• YouTube
• 1 hour 5 minutes
• On-Demand
• Conference Talk

Black Hat

WebKit Everywhere - Secure or Not?

Explore WebKit security, vulnerabilities, and exploitation techniques across platforms. Learn about security enhancements, mitigation strategies, and advanced exploit methods with real-world demos.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Black Hat

The Info Leak Era on Software Exploitation

Explore advanced techniques for exploiting software vulnerabilities through information leaks, focusing on defeating ASLR and converting various vulnerabilities into effective info leaks.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Android: Protecting the Kernel - Kernel Security Strategies

Explore Android kernel security, attack vectors, and defense strategies. Learn about SELinux, DAC capabilities, and new protections implemented in AOSP/Android-N to safeguard against rooting exploits.

• YouTube
• 42 minutes
• On-Demand
• Free Video

CryptoCat

Heap Overflow Exploitation Tutorial - Leek Pwn Challenge

Master binary exploitation techniques through a detailed walkthrough of the "Leek" pwn challenge, covering heap overflow attacks, chunk manipulation, and secret data extraction using practical examples and debugging tools.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

Timekiller: Escape From QEMU/KVM - Exploiting Asynchronous Clock Vulnerabilities

Demonstrating a novel guest-to-host escape exploit in QEMU/KVM using asynchronous clock vulnerabilities. Introduces "Timekiller" technique to turn heap overflow into arbitrary address write, achieving full VM escape.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

DHCP Is Hard

Explore DHCP vulnerabilities and exploits in popular implementations, including dnsmasq, ISC DHCP, and systemd networkd, with insights on architecture and attack techniques.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Meaningful Bounds Checking in the Linux Kernel - Addressing Buffer Overflows

Exploring buffer overflow vulnerabilities in the Linux kernel and innovative solutions for enhanced security through improved bounds checking and compiler optimizations.

• YouTube
• 52 minutes
• On-Demand
• Free Video

Cooper

Ghosts and Gadgets - Common Buffer Overflows That Still Haunt Our Networks

Explore common buffer overflow vulnerabilities in network systems, their detection methods, and practical mitigation strategies for securing modern networks.

• YouTube
• 28 minutes
• On-Demand
• Free Video

Objective-See Foundation

From Crash to Trash, Cash, or Binbash - A Guide to macOS Bug Discovery

Dive into macOS crash reports analysis, learning to identify and investigate system vulnerabilities through real-world examples. Master techniques for reversing Swift and ARM64 to uncover critical security bugs.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

Exposing Critical Threats in Cellular Modem Security - Telit Vulnerabilities Analysis

Uncover critical security vulnerabilities in Telit cellular modems, including remote code execution flaws, SMS-based attacks, and MIDlet compromise methods that affect millions of connected devices.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Black Hat

vCenter Lost - How the DCERPC Vulnerabilities Changed the Fate of ESXi

Discover critical DCERPC vulnerabilities in VMware vCenter Server and advanced heap exploitation techniques to achieve remote root access and ESXi control.

• YouTube
• 30 minutes
• On-Demand
• Free Video