Ao Tian ⚡️
CS161: Memory Un-Safety 🔓
Here lies the shellcode I injected into my own projects, my broken RSA implementations, and Bob and Alice's compromised communications.
Discussion 1: x86 Assembly & Memory

Discussion 1: x86 Assembly & Memory
x86

Pointers, endianness, and remembering how the stack grows (downwards).
Discussion 2: Buffer Overflows

Discussion 2: Buffer Overflows
Segfault

Smashing the stack for fun and profit. RIP instruction pointer.
Discussion 3: Memory Safety Defenses

Discussion 3: Memory Safety Defenses
Mitigation

ASLR, Stack Canaries, and DEP/NX. Trying to patch the holes in C.
Discussion 4: Symmetric Cryptography

Discussion 4: Symmetric Cryptography
Crypto

Block ciphers, AES, CBC mode. Why ECB mode leaves a visible penguin.
Discussion 5: Asymmetric Cryptography

Discussion 5: Asymmetric Cryptography
RSA

RSA, Diffie-Hellman, and prime factorization. Math keeping our secrets safe.
Discussion 6: MACs, Hashes, & Signatures

Discussion 6: MACs, Hashes, & Signatures
Auth

SHA-256, HMACs, and verifying that Bob actually sent the message.
Discussion 7: TLS & Certificates

Discussion 7: TLS & Certificates
HTTPS

Public Key Infrastructure (PKI) and why you shouldn't ignore browser warnings.
Discussion 8: Web Security I (SOP)

Discussion 8: Web Security I (SOP)
Web

Same-Origin Policy. The browser trying its best to not let tabs steal your bank info.
Discussion 9: Web Security II (XSS)

Discussion 9: Web Security II (XSS)
Inject

Cross-Site Scripting and Bobby Tables. Never trust user input.
Discussion 10: Web Security III (CSRF)

Discussion 10: Web Security III (CSRF)
CSRF

Cross-Site Request Forgery and session hijacking. Secure your cookies.
Discussion 11: Network Security

Discussion 11: Network Security
Network

Packet sniffing, ARP spoofing, and BGP hijacking. The internet is built on duct tape.
Discussion 12: Network Defense

Discussion 12: Network Defense
Defense

Firewalls, NIDS, and port scanning. Keeping the bad packets out.
Discussion 13: Malware

Discussion 13: Malware
Malware

Worms, botnets, and ransomware. Analyzing the payload without infecting yourself.