Return-oriented Programming Courses and Certifications

DEFCONConference

Advanced ROP Framework - Pushing Return-Oriented Programming to Its Limits

Discover advanced return-oriented programming techniques with ROP ROCKET framework, featuring syscall bypassing, cross-architecture exploitation, and innovative bad byte handling for enhanced security testing.

• YouTube
• 46 minutes
• On-Demand
• Free Video

IEEE

Evaluation of the Executional Power in Windows Using Return Oriented Programming

Explore Windows vulnerabilities through Return Oriented Programming, evaluating execution power and discussing implications for system security in this IEEE workshop presentation.

• YouTube
• 23 minutes
• On-Demand
• Free Video

DEFCONConference

Process Injection Attacks with Return-Oriented Programming - Advanced Techniques and Methodologies

Discover advanced process injection techniques using return-oriented programming (ROP), including unique string comparison solutions, multiple WinAPI patterns, and practical methodologies for reliable implementation.

• YouTube
• 23 minutes
• On-Demand
• Free Video

IEEE

Return to the Zombie Gadgets - Undermining Destructive Code Reads via Code-Inference Attacks

Explores techniques to bypass destructive code reads, a defensive strategy against code reuse attacks, through constructive reloads and code association via implicit reads, demonstrating vulnerabilities in this security approach.

• YouTube
• 21 minutes
• On-Demand
• Free Video

ACM SIGPLAN

Thread-Level Attack-Surface Reduction for Enhanced Security

Explore thread-level attack-surface reduction, a dynamic approach to eliminate unused code on a thread level, significantly reducing ROP gadgets and enhancing security in multi-threaded applications.

• YouTube
• 22 minutes
• On-Demand
• Free Video

USENIX

MemoryTrap - Booby Trapping Memory to Counter Memory Disclosure Attacks with Hardware Support

Discover MemoryTrap, a hardware-assisted technique using Intel Memory Protection Keys to counter JIT-ROP attacks by placing unreadable "booby traps" in program memory at compile time.

• YouTube
• 15 minutes
• On-Demand
• Free Video

NDC Conferences

Return Oriented Programming, an Introduction

Explore Return Oriented Programming (ROP) exploitation technique, its mechanics, and practical examples for executing code in non-executable stack contexts.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Black Hat

ROPInjector - Using Return Oriented Programming for Polymorphism and Antivirus Evasion

Explore advanced polymorphism techniques using Return Oriented Programming for antivirus evasion, with practical demonstrations of the ROPInjector tool and its effectiveness against detection methods.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

NDC Conferences

Return Oriented Programming, an Introduction

Learn the mechanics of Return Oriented Programming, an exploitation technique. Explore examples demonstrating code execution in contexts with non-executable stacks.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Advanced Cybersecurity Topics

Master advanced cybersecurity techniques including rootkits, OS security, buffer overflow vulnerabilities, and post-exploitation strategies through hands-on labs using the MITRE ATT&CK framework.

• Coursera
• 2 days 55 minutes
• On-Demand
• Paid Course

CppNow

Value Oriented Programming Part V - Return of the Values

Explore value semantics in C++ programming, focusing on improved code readability, correctness, and maintainability. Learn techniques for value-oriented design and implementation.

• YouTube
• 1 hour 42 minutes
• On-Demand
• Free Video

Recon Conference

Taint-Based Return Oriented Programming

Explore an intermediate approach to return oriented programming using taint-based analysis, balancing speed and query expressiveness for efficient gadget discovery and chaining.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

OpenSecurityTraining2

Exploits 2 - Windows Exploit Mitigations and DEP/ASLR/SafeSEH Bypass Techniques

Master Windows exploit techniques by defeating security mitigations like DEP, ASLR, and SafeSEH through hands-on labs and practical demonstrations.

• YouTube
• 10 hours 44 minutes
• On-Demand
• Free Video

Black Hat

Return to Where? You Can't Exploit What You Can't Find

Explore advanced techniques for detecting and preventing memory corruption vulnerabilities, including execute-only memory and code pointer hiding, to enhance software security against sophisticated exploitation methods.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Black Hat

The Beast is in Your Memory

Explore advanced exploitation techniques and control-flow integrity mechanisms. Learn about Return-Oriented Programming, its countermeasures, and how to bypass emerging CFI solutions.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk