Ethical Hacker Community Forums

Ethical Hacking Discussions and Related Certifications => CEH - Official Course Modules v5 => Topic started by: don on November 16, 2006, 04:43:21 PM



Title: CEH v5 Module 20: Buffer Overflows
Post by: don on November 16, 2006, 04:43:21 PM
 Why are Programs/Applications Vulnerable?
 Buffer Overflows
 Reasons for Buffer Overflow Attacks
 Knowledge Required to Program Buffer Overflow Exploits
 Types of Buffer Overflows
    o Stack-based Buffer Overflow
        • Understanding Assembly Language
        • Understanding Stacks
        • Shellcode
    o Heap/BSS-based Buffer Overflow
 How to Detect Buffer Overflows in a Program
 Attacking a Real Program
 NOPS
 How to Mutate a Buffer Overflow Exploit
 Defense Against Buffer Overflows
 Tool to Defend Buffer Overflow
    o Return Address Defender (RAD)
    o StackGuard
    o Immunix System
 Vulnerability Search – ICAT
 Simple Buffer Overflow in C
 Code Analysis

Source:
http://www.eccouncil.org/EC-Council%20Education/ceh-course-outline.htm

Don