Linux Exploits & Mitigation: String Vulnerability Analysis
Ubuntu 20.04
| Intermediate
- 14 videos | 1h 8m 53s
- Includes Assessment
- Earns a Badge
String vulnerabilities are at the core of a wide range of exploits. Being able to recognize, debug, and fix unsafe string manipulation code is essential to avoiding vulnerabilities. In this course, you'll explore how string code can be written safely and how strings vulnerabilities are exploited. You'll look at the most common format string vulnerabilities in the C programming language and what it means to overflow a string buffer. You'll debug string exploits, including vulnerabilities introduced by common string output and manipulation functions. Next, you'll correct common errors, check strings for safety, loop over strings, and see what happens when unsafe strings are executed in a program. Finally, you'll describe how code can be injected via strings and how strings can be returned safely.
WHAT YOU WILL LEARN
-
Discover the key concepts covered in this course
Describe how strings are exploited in computer programs
Illustrate the weaknesses caused by string formatting methods
Perform a string buffer overflow in a c program
Apply flags to the gcc compiler to catch string weaknesses by converting warnings into errors
Recognize and correct weaknesses introduced by poorly implemented string copies
Recognize and correct common input string vulnerabilities -
Explore how generating command line string inputs can exploit insecure string methods
Check input strings for validity and safety
Perform loops over characters in a string in a safe manner
Run programs that fail due to unsafe strings
Describe how strings executed dynamically can lead to vulnerabilities
Recognize safe and unsafe methods of returning strings in c
Summarize the key concepts covered in this course
IN THIS COURSE
-
1m 26s
-
5m 2sUpon completion of this video, you will be able to describe how strings are used in computer programs. FREE ACCESS
-
3. Formatting String Weaknesses7m 32sAfter completing this video, you will be able to illustrate the weaknesses caused by string formatting methods. FREE ACCESS
-
4. Overflowing the String Buffer7m 45sIn this video, find out how to perform a string buffer overflow attack in a C program. FREE ACCESS
-
5. Compiling String Weaknesses4m 13sDuring this video, you will learn how to apply flags to the gcc compiler to catch string weaknesses by converting warnings into errors. FREE ACCESS
-
6. Copying String Weaknesses9m 13sUpon completion of this video, you will be able to recognize and correct weaknesses introduced by string copies that are not implemented well. FREE ACCESS
-
7. Catching Input Vulnerabilities4m 52sUpon completion of this video, you will be able to recognize and correct common input string vulnerabilities. FREE ACCESS
-
8. Generating String Weaknesses5m 15sIn this video, you will explore how generating command line string inputs can exploit insecure string methods. FREE ACCESS
-
9. Checking Strings Safely4m 57sIn this video, you will learn how to check input strings for validity and safety. FREE ACCESS
-
10. Looping Over Strings Safely4m 41sLearn how to safely perform loops over characters in a string. FREE ACCESS
-
11. Executing Unsafe Strings4m 31sIn this video, you will run programs that fail due to unsafe strings. FREE ACCESS
-
12. Injecting Code in Strings3m 5sAfter completing this video, you will be able to describe how strings executed dynamically can lead to vulnerabilities. FREE ACCESS
-
13. Returning Strings Safely5m 29sAfter completing this video, you will be able to recognize safe and unsafe methods of returning strings in C. FREE ACCESS
-
14. Course Summary52s
EARN A DIGITAL BADGE WHEN YOU COMPLETE THIS COURSE
Skillsoft is providing you the opportunity to earn a digital badge upon successful completion on some of our courses, which can be shared on any social network or business platform.
Digital badges are yours to keep, forever.
