二进制漏洞利用

学习材料

参考资料

课程资料与学习路线

英文

Linux

ASU CSE 365：Introduction to Cybersecurity

1. [1]
   “CSE 365: Introduction to Cybersecurity — Fall 2026.” Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse365-f2026/
   机构：

   • Arizona State University
2. [2]
   “Binary Exploitation.” in CSE 365: Introduction to Cybersecurity. Autumn 2026. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse365-f2026/module-6/
   机构：

   • Arizona State University

ASU CSE 466：System Security

采用已公开的 2026 秋模块；后续模块及微架构专题选用 2025 秋版本，具体学期见各条目。

3. [3]
   “CSE 466: System Security — Fall 2026.” Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse466-f2026/
   机构：

   • Arizona State University
4. [4]
   “Assembly and Debugging Refresher.” in CSE 466: System Security. Autumn 2026. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse466-f2026/assembly/
   机构：

   • Arizona State University
5. [5]
   “Program Security.” in CSE 466: System Security. Autumn 2026. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse466-f2026/program-security/
   机构：

   • Arizona State University
6. [6]
   “Return Oriented Programming.” in CSE 466: System Security. Autumn 2026. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse466-f2026/return-oriented-programming/
   机构：

   • Arizona State University
7. [7]
   “Dynamic Allocator Misuse.” in CSE 466: System Security. Autumn 2026. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse466-f2026/dynamic-allocator-misuse/
   机构：

   • Arizona State University
8. [8]
   “Program Exploitation.” in CSE 466: System Security. Autumn 2026. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse466-f2026/program-exploitation/
   机构：

   • Arizona State University
9. [9]
   “CSE 466: System Security — Fall 2025.” Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse466-f2025/
   机构：

   • Arizona State University
10. [10]
    “Race Conditions.” in CSE 466: System Security. Autumn 2025. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse466-f2025/race-conditions/
    机构：

    • Arizona State University
11. [11]
    “Sandboxing.” in CSE 466: System Security. Autumn 2025. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse466-f2025/sandboxing/
    机构：

    • Arizona State University
12. [12]
    “Kernel Security.” in CSE 466: System Security. Autumn 2025. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse466-f2025/kernel-security/
    机构：

    • Arizona State University
13. [13]
    “Microarchitecture Exploitation.” in CSE 466: System Security. Autumn 2025. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse466-f2025/speculative-execution/
    机构：

    • Arizona State University
14. [14]
    “System Exploitation.” in CSE 466: System Security. Autumn 2025. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse466-f2025/system-exploitation/
    机构：

    • Arizona State University

ASU CSE 598：Advanced Software Exploitation

15. [15]
    “CSE 598: Advanced Software Exploitation — Spring 2025.” Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse598-se-s2025/
    机构：

    • Arizona State University
16. [16]
    “Exploitation Primitives.” in CSE 598: Advanced Software Exploitation. Spring 2025. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse598-se-s2025/memory-mastery/
    机构：

    • Arizona State University
17. [17]
    “Format String Exploits.” in CSE 598: Advanced Software Exploitation. Spring 2025. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse598-se-s2025/format-string-exploits/
    机构：

    • Arizona State University
18. [18]
    “File Struct Exploits.” in CSE 598: Advanced Software Exploitation. Spring 2025. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse598-se-s2025/file-struct-exploits/
    机构：

    • Arizona State University
19. [19]
    “Dynamic Allocator Exploitation.” in CSE 598: Advanced Software Exploitation. Spring 2025. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse598-se-s2025/dynamic-allocator-exploitation/
    机构：

    • Arizona State University
20. [20]
    “Kernel Exploitation.” in CSE 598: Advanced Software Exploitation. Spring 2025. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse598-se-s2025/kernel-exploitation/
    机构：

    • Arizona State University

通用与跨平台

ASU CSE 598：Applied Vulnerability Research

2024 秋选取 ARM64 与 XNU 模块；2025 秋仅收录公开的 libcue 实验，不代表完整研究项目。

21. [21]
    “CSE 598: Applied Vulnerability Research — Fall 2024.” Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse598-avr-f2024/
    机构：

    • Arizona State University
22. [22]
    “Introduction to ARM.” in CSE 598: Applied Vulnerability Research. Autumn 2024. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse598-avr-f2024/intro-to-arm/
    机构：

    • Arizona State University
23. [23]
    “ARM64 ROP.” in CSE 598: Applied Vulnerability Research. Autumn 2024. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse598-avr-f2024/arm-rop/
    机构：

    • Arizona State University
24. [24]
    “Mach IPC.” in CSE 598: Applied Vulnerability Research. Autumn 2024. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse598-avr-f2024/xnu-mach-ipc/
    机构：

    • Arizona State University
25. [25]
    “Mach Ports.” in CSE 598: Applied Vulnerability Research. Autumn 2024. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse598-avr-f2024/xnu-mach-ports/
    机构：

    • Arizona State University
26. [26]
    “IOKit.” in CSE 598: Applied Vulnerability Research. Autumn 2024. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse598-avr-f2024/xnu-iokit/
    机构：

    • Arizona State University
27. [27]
    “PAC.” in CSE 598: Applied Vulnerability Research. Autumn 2024. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse598-avr-f2024/xnu-pac/
    机构：

    • Arizona State University
28. [28]
    “CSE 598: Applied Vulnerability Research — Fall 2025.” Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse598-avr-f2025/
    机构：

    • Arizona State University
29. [29]
    “What’s in a bug?” in CSE 598: Applied Vulnerability Research. Autumn 2025. Accessed: Oct. 31, 2026. [Online]. Available: https://pwn.college/cse598-avr-f2025/what-is-a-bug/
    机构：

    • Arizona State University

OpenSecurityTraining2

30. [30]
    “Vulnerability Hunting & Exploitation.” Accessed: Oct. 31, 2026. [Online]. Available: https://ost2.fyi/Vulnerability-Hunting-and-Exploitation.html

Windows

OpenSecurityTraining2

31. [31]
    “Windows Security.” Accessed: Oct. 31, 2026. [Online]. Available: https://ost2.fyi/Windows-Security.html