Intro to Offsec (F24)

Fall 2024. Write-ups and notes.

1

Reverse Engineering

• Static and dynamic debug

2

Pwn ("Pop a shell!")

• Shellcode

• Return-Oriented Programming (ROP)

• Heap and Glibc

3

Web

• SQL, No-SQL injection

• Cross-site scripting (XSS)

4

Tools

• GDB for dynamic debugging

• Binary Ninja for static debugging