Breadcrumb
  1. Training
  2. Education & Training Catalog
  3. OpenSecurityTraining.info
  4. Introduction to Software Exploits

Introduction to Software Exploits

Software vulnerabilities are flaws in program logic that can be leveraged by an attacker to execute arbitrary code on a target system. This class will cover both the identification of software vulnerabilities and the techniques attackers use to exploit them. In addition, current techniques that attempt to remediate the threat of software vulnerability exploitation will be discussed.

This will be a lab driven class where specific software vulnerability types in particular environments are discussed and then exploited in a lab setting. Examples of lab components of the class as well as specific topics covered include:

  • Shellcode development
  • Stack overflow exploitation
  • Heap overflow exploitation
  • Static source code analysis
  • Defeating non-executable stack protection

The class will help students be more aware of the specific details and mechanisms of software exploits we see in the wild. This knowledge will enable the students to better analyze their own software for vulnerabilities in an effort to produce more secure code.

Course Overview

Overall Proficiency Level
3 - Advanced
Course Catalog Number
OST_Exploits1
Course Prerequisites

Must have knowledge of C programming and have taken “Introduction to Intel x86” or have equivalent knowledge.

Training Purpose
Skill Development
Specific Audience
All
Delivery Method
Online, Self-Paced
  • Online, Self-Paced

Learning Objectives

  • Gain a deep understanding of the basic software vulnerability exploitation techniques.
  • Get hands on experience with proof of concept exploit development.
  • Understand current exploit remediation technologies and their weaknesses.

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Specialty Areas

  • Exploitation Analysis

Specialty Areas have been removed from the NICE Framework. With the recent release of the new NICE Framework data, updates to courses are underway. Until this course can be updated, this historical information is provided to give better context as to how it can help you with your cybersecurity goals.

Feedback

If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.

Last Published Date: