NSL Hacks - Intro to Exploitation (Part 1)
Details
A monthly meeting for those interested in learning more about cyber security, hacking, penetration testing, reverse engineering, and embedded security. If you're interested in cyber security, come make some friends and learn some new things!
------------------------------------------------------------------------
Intro to Exploitation
------------------------------------------------------------------------
We're back from hacker summer camp and starting off with an exploitation series. A single off-by-one, a signed integer where an unsigned one belonged, a pointer treated as the wrong type: these are the small mistakes that turn into full system compromise. In this session, we'll break down the fundamentals of memory corruption and turn theory into practice.
We'll cover:
- Integer underflows & overflows: how arithmetic gone wrong opens the door to exploitation
- Type confusion: what happens when a program treats data as something it isn't
- Buffer overflows: the classic. We'll walk through a simple stack-based overflow start to finish
Whether you're new to binary exploitation or want to solidify your foundations, this session will give you the mental models and hands-on techniques to understand how these bugs actually get weaponized.
What to bring: A laptop with an SSH client. We'll provide compute for the hands-on exercises, so there's nothing to install or set up beforehand. All skill levels welcome. Come learn, ask questions, and break some things.
This is planned to be the first of a three-part series. Part 2 will cover Return-Oriented Programming (ROP) and bypassing modern defenses; Part 3 will dive into heap exploitation.
=============================
Where do I park? / How do I get inside?
Parking: There is free street parking on N Ontario St. It is usually easy to find a spot after business hours or on weekends.
Getting inside: Once you park, head down the walkway, we are the long building in the back (see link for overhead directions)
# Parking and entry images: https://032.la/#contact
What does this cost?
This event is FREE, but we are happy to accept donations in cash or online. You can become a NSL member or make a donation online at https://032.la/membership-info/