Return to Where? You Can't Exploit What You Can't Find

This course aims to teach learners how to detect and prevent exploitation of memory corruption vulnerabilities, specifically focusing on countering sophisticated exploitation techniques like return-oriented programming (ROP). The course covers topics such as control-flow integrity (CFI) defenses, memory layout randomization, execute-only memory, and the development of a practical defense called Readactor. The teaching method includes theoretical explanations, practical demonstrations, and evaluations of the defense mechanisms. The course is intended for cybersecurity professionals, software developers, and individuals interested in understanding advanced memory exploitation techniques and defenses.