Giter VIP home page Giter VIP logo

nightmare's Introduction

Nightmare: Ropped and Screwed

Nightmare is an Intro to Binary Exploitation / Reverse Engineering course based around Capture the Flag challenges available here created by GuyInATuxedo. It was named Nightmare by GuyInATuxedo because it's a lot of peoples' nightmare to get hit by weaponized 0days. The skills taught in this course directly translate into doing that type of work. (Additionally, Nightmare is a really cool song).

A nod to the "chopped and screwed" genre pioneered by DJ Screw, this is a slowed-down remix of the Nightmare course. This course is entirely derived from the hard work GuyInATuxedo put in, Roppers just added a bit more of a focus on theory, repeating critical ideas, and slowly building expertise in alignment with the Roppers philosophy. There are also files from other courses I love, specifically Adam Aviv's SI485H. To be extremely clear, I didn't do much and all credit goes to these folks.

I made this remix because I spend a lot of time teaching people Binary Exploitation and while I tell everyone Nightmare is the best course, I found myself supplementing the material with external links. This is my attempt to make a unified repo that has everything needed for a beginner to do a fully self-taught journey into binary exploitation expertise.

Content

  1. Foundational C
  2. Intro to Assembly
  3. Intro to Tooling
  4. Beginner RE
  5. Overflows
  6. Critical Misc.
  7. ROP
  8. More ROP

What Makes Nightmare Different?

From GuyInATuxedo

There are a lot of resources out there to learn binary exploitation / reverse engineering skills, so what makes this different?

*    Amount of Content             -    There is a large amount of content in this course (currently over 90 challenges), laid out in a linear fashion.

*    Well Documented Write Ups         -    Each challenge comes with a well documented writeup explaining how to go from being handed the binary to doing the exploit dev.

*    Multiple Problems per Topic     -    Most modules have multiple different challenges. This way you can use one to learn how the attack works, and then apply it to the others. Also different iterations of the problem will have knowledge needed to solve it.

*    Uses all open source tools     -    All the tools used here are free and open sourced. No IDA torrent needed.

*    A Place to Ask Questions         -    So if you have a problem that you've been working for days and can't get anywhere (and google isn't helping).

I have found that resources that have many of these things to be few and far between. As a result it can make learning these skills difficult since you don't really know what to learn, or how to learn it. This is essentially my attempt to help fix some of those problems.

Github

From GuyInATuxedo A copy of all of the challenges listed can be found on the github: https://github.com/guyinatuxedo/nightmare

Special Thanks

From GuyInATuxedo Special thanks to these people:

noopnoop     -    For dealing with me
digitalcold  -    For showing me how good nightmare could look with mdbook
you nerds     -    For looking at this

Official Nightmare Discord

If you get stuck on something for hours on end and google can't answer your question, try asking in GuyInATuxedo's discord (or if you just feel like talking about cool security things). Here is a link to it https://discord.gg/p5E3VZF

nightmare's People

Contributors

guyinatuxedo avatar deveynull avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.