Thesis-2023

KO | EN

gitlite — search

#javascript #python #hacktoberfest #react #ai #typescript #llm #go #golang #android #machine-learning #rust #deep-learning #linux

★ 11 Open GitHub ↗

My Thesis for University of West Attica about c/c++ common vulnerabilities.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<p align="center">
<img src="assets/logo.png" alt="drawing" width="300px" />
<h2 align="center"> Nikolaos-Athanasios Sarridis </h2>   
<h2 align="center"> 711151026</h2>
</p>

My [thesis](https://polynoe.lib.uniwa.gr/xmlui/handle/11400/4148) focuses on finding, triggering, abusing, explaining, and exploiting common vulnerabilities when writing a C/C++ program and are related to program security. Someone can take advantage of these vulnerabilities and gain access to the system or read confidential files that he/she is not allowed to. Our goal is to eliminate these programming "errors" that trigger a bug (from the defensive side) and learn how to find such flaws to patch them and write more secure code.
Some of the bugs we will see are

* `Buffer Overflows`,
* `Format Strings`,
* `Integer Overflows`,
* and `Off-by-one`.

We will exploit these bugs by using these techniques:

`ret2libc`,
`ret2csu`,
`ret2shellcode`,
`one gadget`.

All the bugs above will be implemented in Linux binary files (ELF) and will run in virtual environments (Docker). There will be step-by-step guidance on how to:

* approach these challenges,
* find and trigger the bugs,   
* and exploit them.

In the end, there will be a python script that will give us access to the system and an explanation of how to patch the program to prevent each error.

This repo contains all the files needed to:
* build
* play
* solve

The challanges demonstrated in my Thesis.

Thesis-2023

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README