Lab activities

The topics of labs in future weeks are subject to adjustment until the instructions are linked here, but the topics are generally indicative of what is coming up.

• Lab 0 (optional online only): Remote access and collaboration
• Lab 1 (1/22): Memory safety bugs and GDB
• Lab 2 (1/29): More memory safety bugs
• Lab 3 (2/5): Memory safety attacks
• Lab 4 (2/12): Fuzzing with AFL, and heap attacks
• Lab 5 (2/19): Overflow obstacle course, format string attacks
• Lab 6 (2/26): Unix permissions
• Lab 7 (3/11): OS-level (shell, race condition) attacks
• Lab 8 (3/18): Network information and sniffing
• Lab 9 (3/25): SQL injection attacks
• Lab 10 (4/1): Cross-site scripting attacks
• Lab 11 (4/8): Cryptanalysis of a flawed MAC
• Lab 12 (4/15): Protocol replay attack
• Lab 13 (4/22): Password dictionary attacks
• Lab 14 (4/29): Choice of Return-to-libc and ROP attacks or Cross-site request forgery