Return-oriented Programming Courses and Certifications

IEEE

Return to the Zombie Gadgets - Undermining Destructive Code Reads via Code-Inference Attacks

Explores techniques to bypass destructive code reads, a defensive strategy against code reuse attacks, through constructive reloads and code association via implicit reads, demonstrating vulnerabilities in this security approach.

• YouTube
• 21 minutes
• On-Demand
• Free Video

IEEE

Evaluation of the Executional Power in Windows Using Return Oriented Programming

Explore Windows vulnerabilities through Return Oriented Programming, evaluating execution power and discussing implications for system security in this IEEE workshop presentation.

• YouTube
• 23 minutes
• On-Demand
• Free Video

ACM SIGPLAN

Thread-Level Attack-Surface Reduction for Enhanced Security

Explore thread-level attack-surface reduction, a dynamic approach to eliminate unused code on a thread level, significantly reducing ROP gadgets and enhancing security in multi-threaded applications.

• YouTube
• 22 minutes
• On-Demand
• Free Video

DEFCONConference

Advanced ROP Framework - Pushing Return-Oriented Programming to Its Limits

Discover advanced return-oriented programming techniques with ROP ROCKET framework, featuring syscall bypassing, cross-architecture exploitation, and innovative bad byte handling for enhanced security testing.

• YouTube
• 46 minutes
• On-Demand
• Free Video

DEFCONConference

Process Injection Attacks with Return-Oriented Programming - Advanced Techniques and Methodologies

Discover advanced process injection techniques using return-oriented programming (ROP), including unique string comparison solutions, multiple WinAPI patterns, and practical methodologies for reliable implementation.

• YouTube
• 23 minutes
• On-Demand
• Free Video

Advanced Cybersecurity Topics

Master advanced cybersecurity techniques including rootkits, OS security, buffer overflow vulnerabilities, and post-exploitation strategies through hands-on labs using the MITRE ATT&CK framework.

• Coursera
• 2 days 55 minutes
• On-Demand
• Free Online Course (Audit)

Security for Hackers and Developers: Exploit Development

34 ratings at Pluralsight

This course will help you understand how to prioritize your software security by teaching you how to exploit your security. Make the proper steps to become more secure.

• Pluralsight
• 1 hour 48 minutes
• On-Demand
• Free Trial Available

IEEE

Spectre Attacks Exploiting Speculative Execution

Explore speculative execution vulnerabilities in modern processors, their impact on system security, and potential countermeasures to protect against Spectre attacks.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Black Hat

Enter Sandbox

Explore automated seccomp filter generation for Linux applications, enhancing security through sandboxing and system call restrictions without manual developer intervention.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

USENIX

ROP is Still Dangerous - Breaking Modern Defenses

Explores advanced Return Oriented Programming attacks, demonstrating vulnerabilities in modern defense mechanisms and proposing strategies to overcome security measures like kBouncer and ROPecker.

• YouTube
• 17 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Software Security Era - Past, Present, and Future

Explore the evolution of memory corruption exploitation, from early techniques to modern mitigations. Includes live demos of vulnerabilities and discusses the ongoing challenges in software security.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Automatic Generation of ROP Chains

Introduces EasyROP, a tool for automating ROP attacks by finding gadgets in binary files. Analyzes Windows libraries for attack feasibility and demonstrates a real-world application on CVE-2010-3333.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Exploiting a Limited UAF on Ubuntu 22.04 to Achieve LPE

Detailed exploration of exploiting a Linux kernel vulnerability in Ubuntu 22.04 to achieve local privilege escalation, focusing on advanced exploitation techniques and bypass methods.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

BSidesLV

ROP with a 2nd Stack, or This Exploit is a Recursive Fibonacci Sequence Generator

Explore advanced ROP techniques using a second stack, delving into recursive Fibonacci sequence generation as an exploit method. Gain insights into innovative cybersecurity approaches.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Black Hat

OptiROP - Hunting for ROP Gadgets in Style

Discover efficient ROP gadget hunting with OptiROP, a tool using semantic queries for quick, precise results across executable formats on x86/x64 architectures. Simplify shellcode development.

• YouTube
• 1 hour 7 minutes
• On-Demand
• Conference Talk