Hacking and Securing C++
summary
A small embedded device is built as a reproducible playground (project on GitHub, slides linked) and concrete exploits are demonstrated: stack reuse leaks previous password when an uninitialized message buffer is reused; use after free lets attacker reuse a freed OTP to bypass login by reallocating the same heap chunk; buffer overflow -> return address overwrite and ROP to turn on LED and spawn a shell with mitigations shown (non‑executable stack, ASLR, smart pointers, wiping sensitive memory).
AI-written summary · about
chapters (9)
- 0:00Hacking and securing C++
- 5:04Project setup overview
- 9:54Embedded memory model
- 14:08Stack vulnerabilities
- 21:37Heap memory bugs
- 31:12Buffer overflows and hijacking
- 47:23Return oriented programming
- 59:24Mitigation strategies
- 1:00:28Q&A
related talks
01h 00m“Secure Coding Best Practices: Your First Line Is The Last Line Of Defense (1 of 2)”
01h 06mHow hacking works
01h 26mEmbracing an Adversarial Mindset for C++ Security
17mEmbedded Security's Weakest Link: Lessons From Simple Mistakes
02h 27mHow hacking works (Workshop edition)
33mEmbedded Device Exploitation 101: An Introduction to Firmware Hacking
47mBinary Exploitation 101: Offensive C Security
55mHow hacking works