Ethical Hacking 2024

Lecture plan:

1. Legality of Hacking and Responsible Disclosure (30/1)
2. Binary Reverse Engineering (6/2)
3. Adversarial AI (13/2)
4. Deserialization Attacks (Java/Python/.NET attacks) (20/2)
5. Fuzzying: Binaries (AFL), make your own fuzzer, Web (27/2)
6. Symbolic execution: Angr, build your own engine (5/3)
7. Guest lecture: code scanning with CodeQL [Live coding files] (12/3)
8. HW hacking (19/3) <- deadline 1 (Assignment update: Cancelled!)
9. Bad use of cryptography / Breaking RSA (2/4)
10. Forensics & antiforensics / Forensics Exercise (9/4)
11. Identifying & breaking security assumptions (16/4) <- deadline 2
12. Guest lecture: Nicolai Strøm Steffensen / CSIS (23/4)
13. Tentative: small CTF game

Project:

1. Find a project/organization, identify/agree on responsible disclosure policy.
2. Preliminary exploration: HW/SW architecture, security model and assumptions.
3. Choose a technique from class and hack away :)
4. Follow through with responsible disclosure.