- This is the public repository for the course listed as Advanced OS
This hands-on seminar course introduces students to the fundamentals of offensive cyber capabilities development. Through a scaffolded, three-part curriculum, students will design and implement a multi-stage implant targeting a bespoke sandbox environment. The course culminates in a capstone project where students will have developed a comprehensive capability to gain initial access, execute a payload, and exfiltrate critical data in an operationally secure manner.
- Duration: 10 weeks. Studio plus lab.
- Modality: Mix of in person with remote-friendly repos. Required lab section every week.
- Pace: Three parts. Weeks 1–3 IO. Weeks 4–6 payload creation. Weeks 7–10 execution and injection.
- Capstone: Capability targeting a custom sandbox
- While there will be periodic programming assignments, students will spend the bulk of their time creating capabilities that allow them to exfiltrate data from a custom application.
- As the course progresses, the countermeasures in place will become more robust.
- The final environment will require a multi staged capability that is able to exploit vulnerabilities in the application to downsample and exfiltrate data from the target system.
- All notes, assignment READMEs and extra content is contained in the ObsidianVault directory. To open this, please download obsidian.md.
- Navigate to ObsidianVault/GettingStarted.md and follow the directions there.
- Please note that while all the files in the Vault are markdown, they are rendered differently on github than they are in Obsidian.
- Please make sure to carefully follow the directions.
Questions, comments? Feel free to reach out on Discord
@k111b222s333e444c555
Remove the numbers :-)
Like the course and want to express your gratitude? In lieu of payment, show your appreciation by
-
- hiring one of my many wonderful students
-
- send a student to a security conference
-
- give a talk
-
- buy us pizza :-)
- Special thanks to Ari, Leo and Wayne for making the first iterations of this course happen
Dedicated to Mike Murray. Without you, I wouldn't be where I am today.