Heap Overflows Courses and Certifications

This course will familiarize students with all aspects of reverse engineering (reversing) Linux 32-bit applications for the purposes of locating flaws and developing exploits.

• PentesterAcademy
• On-Demand
• Paid Course

Hack In The Box Security Conference

DHCP Is Hard

Explore DHCP vulnerabilities and exploits in popular implementations, including dnsmasq, ISC DHCP, and systemd networkd, with insights on architecture and attack techniques.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Black Hat

The Info Leak Era on Software Exploitation

Explore advanced techniques for exploiting software vulnerabilities through information leaks, focusing on defeating ASLR and converting various vulnerabilities into effective info leaks.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Black Hat

WebKit Everywhere - Secure or Not?

Explore WebKit security, vulnerabilities, and exploitation techniques across platforms. Learn about security enhancements, mitigation strategies, and advanced exploit methods with real-world demos.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

NDC Conferences

Classic Vulnerabilities

Explore classic vulnerabilities in native exploitation, their recent resurgence, and modern tools for detection and prevention in this comprehensive security talk.

• YouTube
• 1 hour 5 minutes
• On-Demand
• Conference Talk

Meaningful Bounds Checking in the Linux Kernel - Addressing Buffer Overflows

Exploring buffer overflow vulnerabilities in the Linux kernel and innovative solutions for enhanced security through improved bounds checking and compiler optimizations.

• YouTube
• 52 minutes
• On-Demand
• Free Online Course

Android: Protecting the Kernel - Kernel Security Strategies

Explore Android kernel security, attack vectors, and defense strategies. Learn about SELinux, DAC capabilities, and new protections implemented in AOSP/Android-N to safeguard against rooting exploits.

• YouTube
• 42 minutes
• On-Demand
• Free Online Course

Hack In The Box Security Conference

Timekiller: Escape From QEMU/KVM - Exploiting Asynchronous Clock Vulnerabilities

Demonstrating a novel guest-to-host escape exploit in QEMU/KVM using asynchronous clock vulnerabilities. Introduces "Timekiller" technique to turn heap overflow into arbitrary address write, achieving full VM escape.

• YouTube
• 53 minutes
• On-Demand
• Free Online Course

IIT Madras;  NPTEL

Information Security - 5 - Secure Systems Engineering

With the increase in the threat of cyber-security attacks, it is important to develop computer systems that are not only efficient but also secure. This course will discuss various vulnerabilities in systems and mechanisms by which these vulnerabilities…

• Swayam
• 8 weeks
• Finished
• Free Online Course

CNIT - City College of San Francisco

CNIT 127: Exploit Development

Learn how to find vulnerabilities and exploit them to gain control of target systems, including Linux, Windows, Mac, and Cisco.

• Independent
• 16 weeks
• Finished
• Free Online Course