Software (In)security - corso di sicurezza II

per scaricare il repository del corso eseguite il comando:

git clone https://github.com/vaioco/sicII.git

#dependencies

• apt-get install build-essentials git binutils ia32-libs
• checksec.sh
• hopperapp.com
• IDA

#come disabilitare ASLR echo 0 > /proc/sys/kernel/randomize_va_space

#gcc flags -fno-stack-protector -z execstack -mpreferred-stack-boundary=2 -m32

Link utili

• [ELF] 1 Format by example
• ELF Format [specification] 2
• [GDB] 3 tutorial and [cheatsheet] 4
• how to use [objdump] 5
• [Smashing the stack for fun and profit] 6
• [Smashing the stack in 2010] 7
• [layout dei binari in memoria] 8
• [x86 assembly guide] 9