NSL Hacks - Return Oriented Programming (Exploitation Pt. 2)

A monthly meeting for those interested in learning more about cyber security, hacking, penetration testing, reverse engineering, and embedded security. If you're interested in cyber security, come make some friends and learn some new things!

------------------------------------------------------------------------
Return Oriented Programming (ROP) Exploitation
------------------------------------------------------------------------

This month's topic is Return Oriented Programming (ROP) for binary exploitation. Last month we reviewed how simple mistakes in handling input in code can lead to crashes and full system compromise with basic stack-based buffer-overflows. This month we're reviewing a more advanced exploitation method that lets us bypass the protections of a non-executable stack or on architectures where code and data are segmented. We'll review the memory and programming concepts behind return oriented programming and work towards building our own custom payloads to build exploits to defeat these protections.

We'll cover:

Stack execution protections in x8664
Memory/data segmentation
How ROP works at the assembly/binary level
Finding and using ROP gadgets
Building ROP chains

Whether you're new to binary exploitation or want to solidify your foundations, this session will give you the mental models and hands-on techniques to understand how these bugs actually get weaponized.

What to bring: A laptop with an SSH client. We'll provide compute for the hands-on exercises, so there's nothing to install or set up beforehand. All skill levels welcome. Come learn, ask questions, and break some things.

Recommended reading: We recommend studying up on C programming, x8664 assembly programming, shellcoding, and stack-based buffer overflows. This is considered an intermediate class, but you can still attend and learn as a beginner.

=============================

Where do I park? / How do I get inside?
Parking: There is free street parking on N Ontario St. It is usually easy to find a spot after business hours or on weekends.
Getting inside: Once you park, head down the walkway, we are the long building in the back (see link for overhead directions)

Parking and entry images: https://032.la/contact

What does this cost?
This event is FREE, but we are happy to accept donations in cash or online. You can become a NSL member or make a donation online at https://032.la/membership-info/