deep-roots learning program · module 02

Module 02 — Memory security & exploitation

Every chapter: first principles, What insiders know, a See it yourself lab, connections, and a quiz with worked answers.

01

The attacker's model

Trust boundaries, privilege, and the bug → primitive → exploit → impact chain.

→
02

Stack exploitation

Smashing the stack, canaries and their bypasses, off-by-one lore.

→
03

Code reuse: ROP and friends

DEP ends code injection; ROP, ret2libc, SROP, JOP answer it.

→
04

Heap exploitation

glibc metadata as an attack surface: tcache, fastbins, House-of-* lore.

→
05

Use-after-free

The modern #1 bug class: reclaim, confuse, control.

→
06

The mitigation ladder

NX, ASLR, RELRO, CFI, PAC, MTE — the arms-race ledger with costs.

→
07

Side channels

Cache timing, Spectre-class, Rowhammer — attacks that corrupt nothing.

→
the exam
fin

Module 02 final exam

Every chapter, worked answers behind the fold.

→