Code for Software Security Class in Zhejiang University.

Instructor: Yajin Zhou (https://yajin.org)

The code is written for educational purpose only, and works (as it is) on x86_64 architecture (except for specified in the script).

You need to install pwntools to use most of the scripts.

pip install pwntools

If you find any bugs or have any suggestions, please contact me ([email protected]).

Credit: Some of the code was developed by Duoming Zhou.

Return to shellcode.

• Slides

Return to libc

Slides:

• Ret2libc without ASLR (x86-32)
• Ret2libc with ASLR (x86-32)
• Ret2libc (x86-64)

Slides:

• Format String Vulnerability

Slides:

• Heap Vulnerabilities and Attacks

Slides:

• Introduction to Account and Transaction
• Introduction to Smart Contracts
• Smart Contract Vulnerabilities & Attacks (1)
• Smart Contract Vulnerabilities & Attacks (2)
• Smart Contract Vulnerabilities & Attacks (3)