Course Calendar

Below is the calendar for this semester course. This is the preliminary schedule, which may need to be altered as the semester progresses. It is the responsibility of the students to frequently check this web-page for schedule, readings, and assignment changes. As the professor, I will attempt to announce any change to the class, but this web-page should be viewed as authoritative. If you have any questions, please contact me (contact information is available at the course homepage).

Special thanks to Joe Wilson (University of Florida) for his significant contribution to the course slides.

Date Topic Assignments Due Readings/Discussions
(do readings before class)
Slides
01/15/19 Introduction Course syllabus (link)

VirtualBox (link)

Kali Linux (link)

Introduction
01/22/19 C and Assembly Art of Exploitation, Chapter 2

gdb lab (link)

lab example (link)

lab source (link)

Assembly
01/29/19 Basic code exploitation Art of Exploitation, Chapter 3

exploits lab (link)

Narnia Exercises (link)

Ethics study 1 - Buffer Overflow (link)

Exploits
02/05/19 Networking Ethics study 1 Art of Exploitation, Chapter 4

Wireshark (link)

Kurose & Ross Wireshark labs (link)

Networks
02/12/19 Weather closure -- No Class.
02/19/19 Network Hacking Art of Exploitation, Chapter 4

Ethics study 2 - Equifax and Apache Struts (link)

Project Topics (link)

Network Attacks
02/26/19 Mid-term Exam
03/05/19 Spring Break -- No Class
03/12/19 Designing and hiding shellcode Project Topics, Ethics study 2 Art of Exploitation, Chapter 5-6

Countermeasures
03/19/19 OSINT and Scanning Tools Intelligence-Driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains. E. Hutchins, M. Cloppert, R. Amin, Lockheed Martin Corporation, 2011. (link)

scanning lab (link)

Practice environment (link)

Ethics study 3 - Firesheep and Authentication Tokens (link)

OSINT
03/26/19 Exploit tools Ethics study 3 Rapid7. Metasploit Documentation. Read "Getting Started", "Metasploit Basics", and "Metaploit Framework". (link)

Practice environment (link)

04/02/19 Web app hacking Practice environment (link)

Ethics study 4 - WannaCry and Ransomware (link)

04/09/19 Cryptography and authentication Ethics study 4 Art of Exploitation, Chapter 7

04/16/19 Lateral movement and privilege escalation Practice environment (link)

Ethics study 5 - Target and Physical Security (link)

04/23/19 Social engineering and student projects Ethics study 5 Practice environment (link)

04/30/19 Class Capture the Flag Final project write-up due at final
05/07/19 Final Exam - 18:15-21:00