Heap Overflows Courses and Certifications

IIT Madras;  NPTEL

Information Security - 5 - Secure Systems Engineering

With the increase in the threat of cyber-security attacks, it is important to develop computer systems that are not only efficient but also secure. This course will discuss various vulnerabilities in systems and mechanisms by which these vulnerabilities…

• Swayam
• 8 weeks
• On-Demand
• Free Online Course

This course will familiarize students with all aspects of reverse engineering (reversing) Linux 32-bit applications for the purposes of locating flaws and developing exploits.

• PentesterAcademy
• On-Demand
• Paid Course

Black Hat

WebKit Everywhere - Secure or Not?

Explore WebKit security, vulnerabilities, and exploitation techniques across platforms. Learn about security enhancements, mitigation strategies, and advanced exploit methods with real-world demos.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Black Hat

The Info Leak Era on Software Exploitation

Explore advanced techniques for exploiting software vulnerabilities through information leaks, focusing on defeating ASLR and converting various vulnerabilities into effective info leaks.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

NDC Conferences

Classic Vulnerabilities

Explore classic vulnerabilities in native exploitation, their recent resurgence, and modern tools for detection and prevention in this comprehensive security talk.

• YouTube
• 1 hour 5 minutes
• On-Demand
• Conference Talk

Android: Protecting the Kernel - Kernel Security Strategies

Explore Android kernel security, attack vectors, and defense strategies. Learn about SELinux, DAC capabilities, and new protections implemented in AOSP/Android-N to safeguard against rooting exploits.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

DHCP Is Hard

Explore DHCP vulnerabilities and exploits in popular implementations, including dnsmasq, ISC DHCP, and systemd networkd, with insights on architecture and attack techniques.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Timekiller: Escape From QEMU/KVM - Exploiting Asynchronous Clock Vulnerabilities

Demonstrating a novel guest-to-host escape exploit in QEMU/KVM using asynchronous clock vulnerabilities. Introduces "Timekiller" technique to turn heap overflow into arbitrary address write, achieving full VM escape.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Cooper

Ghosts and Gadgets - Common Buffer Overflows That Still Haunt Our Networks

Explore common buffer overflow vulnerabilities in network systems, their detection methods, and practical mitigation strategies for securing modern networks.

• YouTube
• 28 minutes
• On-Demand
• Free Video

Meaningful Bounds Checking in the Linux Kernel - Addressing Buffer Overflows

Exploring buffer overflow vulnerabilities in the Linux kernel and innovative solutions for enhanced security through improved bounds checking and compiler optimizations.

• YouTube
• 52 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

Exposing Critical Threats in Cellular Modem Security - Telit Vulnerabilities Analysis

Uncover critical security vulnerabilities in Telit cellular modems, including remote code execution flaws, SMS-based attacks, and MIDlet compromise methods that affect millions of connected devices.

• YouTube
• 53 minutes
• On-Demand
• Free Video

CNIT - City College of San Francisco

CNIT 127: Exploit Development

Learn how to find vulnerabilities and exploit them to gain control of target systems, including Linux, Windows, Mac, and Cisco.

• Independent
• 16 weeks
• Finished
• Free Online Course