applied security conferences and training: CanSecWest | PacSec | EUSecWest | BA-Con

Security Masters Dojo

Advanced and intermediate security training and technology enhancement for information security professionals.

CanSecWest: Security Masters Dojo Vancouver

Next Session Dates: March 22-23 2010
Venue: Sheraton Wall Center
Vancouver, Canada
Duration: 1 or 2 Day Courses.
Sessions begin at 10:00 a.m. and go to 6 p.m.
Registration
Maximum: 		15 Students per course session.

The Exploit Laboratory - Advanced Edition

Instructor:
Saumil SHAH <saumil at saumil dot net>

Register For This Course

Description

Have you ever found yourself staring at a vulnerability advisory with some proof-of-concept snippets and wished the author had rather attached a working exploit with it? Have you wished you could analyze vulnerabilities and write your own exploits for them? Have you wanted to debug and exploit custom built applications and binaries?

Now in its third year, the Exploit Laboratory brings you an action packed 2-day class teaching you the art of vulnerability analysis and exploitation from the ground up. The Exploit Laboratory starts off with a basic insight into system architecture, process execution, operating systems and error conditions. The class then quickly accelerates to analysing vulnerabilities with debuggers, reproducing reliable error conditions and writing working exploits for the same. The Exploit Laboratory features popular third party applications and products as candidates for vulnerability analysis and exploitation, rather than building up on carefully simulated lab exercises. Most of the class time is spent working on lab exercises and examples.
Lab examples and exercises used in this class cover both the Unix (Linux) and Microsoft Windows platforms, illustrating various error conditions such as stack overflows, heap overflows and format string bugs (time permitting). The latter part of the class focuses on topics such as bypassing protection mechanisms, multi-stage payloads, integrating your own exploits into frameworks such as Metasploit, etc.

All this - delivered in a down-to-earth, learn-by-example methodology, by trainers who have been teaching advanced topics in computer security for over 9 years.
This class is updated from the 2008 edition, featuring new content on heap overflows, abusing exception handlers and more hands-on examples based on recent vulnerabilities. The class features Mac OS X exploitation, for the first time. This class does NOT require knowledge of assembly language. A few concepts and a sharp mind is all you need.

Topics

PREREQUISITE WARNING Each class has prerequisites for software loads and a laptop is mandatory. These individual class guides will list material the students are expected have knowledge about coming in and software tools that need to be pre-installed before attending so you get the maximum benefit from the focused intermediate or advanced level course. Please pay particular attention to the prerequisites, as the material listed there will not be reviewed in the courses, and will be necessary to get the maximum benefit out of these educational programs.

Prerequisite Knowledge

Laptop requirements

The Exploit Laboratory is an intense hands-on class. The labs are delivered using VMware images handed out in class. Each participant has to have a laptop capable of running VMware (workstation or player) and additional attack tools. All target images shall be presented during class. Please bring a working and tested laptop with the following hardware/software requirements:

All participants shall get a clear list of laptop preparation instructions approximately a week before the class. Please come prepared - we will save precious time in setups and spend it playing with exploits instead!