Notices

  • Final Exam Information <- Read this

    Posted by Adam Tanana Sunday 22 August 2021, 04:00:46 PM.

    hey everyone! This email contains all the information for your upcoming final exam! Please read it all in detail, and reply back with any clarifying questions as soon as possible.

    The Final exam will be hosted on https://exam.comp6447.wtf . You will need to login with your UNSW credentials when you visit this website. The exam is on Thursday 26 August 13:00 2021 Sydney Time for 3 hours. It ends at 16:00 (4pm).

    On the exam site there is an info page . Please make sure you read this in detail before the exam . It has details on the specific instructions for doing and submitting the exam. Not reading this and then not following the instructions is not a good enough reason to failing to complete the exam. On this page you can also download the Binary challenges (a password protected zip) now. The password will be released on this page when the exam starts. Make sure you download these before exam starts in-case of any issues with your internet on the day of the exam.

    If there are any issues during the exam. Follow the instructions under Troubleshooting on the info page linked above.

    Good luck!

    Note: Attempting to attack course infrastructure, especially during the exam, such as the website, login page or enumerating challenge ports before the exam starts will get you a 0 in the course.

  • Assignment marks released

    Posted by Adam Tanana Friday 20 August 2021, 02:42:43 PM.

    Hey everyone, You should have hopefully received an email from me with assignment feedback and marks. If there are any issues please let me know!


  • Wargames marks and Exam Tips/Instructions

    Posted by Adam Tanana Sunday 15 August 2021, 08:38:25 PM.

    Hey folks.


    All wargames have been marked, please check both the marks and comments make sense. I've left comments on peoples reversing and source auditing questions.

    Just a reminder that the exam skeleton is available at https://prelicence.exam.comp6447.wtf/info .
    Please make sure to read every page and the instructions on each page to ensure you don't lose marks for not following the instructions.


    A few notes from marking the last few reversing and source auditing questions, tips for the questions in the exam.

    Source Auditing

    • Bugs / Warnings / Memory Leaks are not exploitable vulnerabilities.
    • Each question has only one vulnerability that is exploitable. Listing a bunch of non-issue bugs (like variable is unused, char casted to integer implicitly, malloc return not checked) will get you no marks (unless you can show how they are exploitable).

    Reversing:

    • Make sure to provide meaningful variable names to show you understand what the program is doing
    • Don't forget return values and function signatures (type of arguments and return)

  • COMP6447

    Posted by Adam Tanana Saturday 07 August 2021, 10:01:55 AM.

    Hey folks.

    Only 20% of students have completed MyExperience for this term. Please take a chance to complete the surveys at myexperience.unsw.edu.au . The last chance to do these is this week , it takes only a few minutes but we definitely benefit from the feedback. The course has changed significantly in the past based on feedback on MyExperience :)

    I'll send an email closer to the exam date with specific exam instructions (and maybe a help session or two if the MyExperience numbers go up). Good luck with studies and fuzzer submissions!


  • Skeleton Exam + others

    Posted by Adam Tanana Tuesday 03 August 2021, 12:43:59 PM.

    Hey folks. Hope you've enjoyed the course so far it's been super fun to teach.

    Just a reminder in case you missed it, the skeleton final exam can be found at prelicence.exam.comp6447.wtf .

    Also there are no tutorials this week, Good luck with exam preparations. Please try to fill out myexperience if you get a chance, feedback helps us heap s!

  • Revision Lecture tonight

    Posted by Ash Liu Monday 02 August 2021, 11:07:36 AM.

    Hi everyone

    Tonight will be the last lecture of the term, and we are opening it up for you to suggest topics that Adam should re-visit.
    Please fill out this form before the start of the lecture (6pm tonight). Live questions during the lecture are also welcome.

    Good luck with your major project and exam preparation!

  • Guest Lecture Tonight

    Posted by Adam Tanana Monday 26 July 2021, 10:39:01 AM.

    Hey all. Just a reminder that tonight Mark Dowd will be giving an awesome lecture on modern day exploitation.

    The lecture won't be recorded, so make sure to tune in live!

  • Midsem Exam Walkthrough / Debrief

    Posted by Adam Tanana Saturday 03 July 2021, 12:37:15 PM.

    Hey Folks. Most people have finished the exam so far, Congrats!

    Given this is quiet week, I'll be doing a walkthrough of the exam during the normal lecture slot this week. (Monday 6pm Week 6).


  • Midsem Exam

    Posted by Adam Tanana Thursday 01 July 2021, 09:49:10 PM.

    Hey all just a reminder that the Midterm exam is tomorrow (2nd July).

    The exam will be on Moodle . If you have trouble navigating Moodle please let us know ASAP. Also please remember this is an exam, please do not talk about the exam online (even after you have finished it), as people will be doing the exam up until Monday.


    Good luck tomorrow!

  • Revision Class

    Posted by Adam Tanana Tuesday 29 June 2021, 03:17:57 PM.

    Hey folks. Just a reminder that I'll be hosting a help session (Q&A) today at 7pm on the Lecture zoom link. I'll be walking through solutions to a few of the wargames for previous weeks, and answering questions you might have!

    If you do come please come prepared with questions!

  • Tutorials and midsem consultation

    Posted by Adam Tanana Sunday 27 June 2021, 07:04:36 PM.

    Hey folks. Welcome to the first edition of stay at home Ted Talks.

    All classes will be moving online. Your tutors should reach out to you regarding zoom links. Please try to turn on your camera+mic in classes . Teaching online is hard, and learning online is even harder, try to engage in your tutorials to maximise the use of your tutorials.


    Pre exam Help session

    We have received a bunch of feedback about going through more concrete examples. I'm going to be giving a consultation where I walk through solutions of a few past wargames, and answer any questions you might have. This session will not be recorded.

    Please mark down what time you would be able to come to a help session this week so we can maximise attendance here -> https://www.when2meet.com/?12201656-8zwdK .

    Also please fill in this webcms poll to vote on what wargames/topics you want covered. https://webcms3.cse.unsw.edu.au/COMP6447/21T2/activities/polls/1338

  • Covid Lectures and Exams

    Posted by Adam Tanana Thursday 24 June 2021, 08:37:14 PM.

    Lectures

    Due to the recent outbreak in Sydney and me living in a hotspot the Lectures will be moved online-only until further notice. The zoom link can be found on Webcms, lectures will still be recorded and uploaded as usual.

    Midsem exam

    As discussed in the lecture this week, There will be a midsem exam next Friday. Here are the details:

    Location: On Moodle . If you can't access Moodle for this course, please email us ASAP at cs6447@cse.unsw.edu.au

    Time: The exam is 2 hours long and must be taken during Friday 2nd July. 10am-6pm . If you are unable to take the exam during these times, please email us! (Just a reminder that trying to solve the challenges locally or remotely before you start the exam is cheating...)

    Topics: There will be 3 flags you must retrieve to get full marks. These will test topics including buffer overflows and format strings. ASLR will be enabled for the exam.

    Good luck with your studies, if you are able to complete all the wargames up until this point, you are in good shape for the exam.

    Extra spice

    We will be having a super cool guest lecture at the end of July. This will be in the normal lecture slot and I'll release more details closer to the date. The lecture will be awesome and I recommend attending, the content won't be assessable, but it will be about <redacted> and given by <redacted> which I think is super awesome :). This guest lecture also won't be recorded.

  • COVID-19 situation and in-person classes

    Posted by Ash Liu Thursday 24 June 2021, 09:49:36 AM.

    Hi everyone,

    Given the current COVID-19 situation in Sydney, if you'd like to attend an online tutorial, please feel free to move to either one of the existing ones. Details can be found on the timetable .

    I'd like to remind students in the in-person tutes that please do not attend campus if you have any symptoms or have attended any venue of concern. Again, feel free to attend an online tute that week.

    We will continue to monitor and assess the situation. If we need more online tutorials, we'll move some or all of the in-person classes online.

    Please, if you have any concerns or queries, please email cs6447@cse.unsw.edu.au.

  • Week 3 Lecture

    Posted by Adam Tanana Saturday 12 June 2021, 05:39:07 PM, last modified Monday 14 June 2021, 01:36:04 PM.

    Hey all, just a reminder that Monday the 14th is the Queens birthday so we won't be having a lecture in-person. Instead we will be releasing a recorded lecture.
    I'll be recording the lecture live on zoom at the normal lecture time, but there is no expectation to watch this lecture live. It is recorded and will be released shortly after .

    Enjoy the long weekend!

  • Week 2 Notice

    Posted by Ash Liu Wednesday 09 June 2021, 04:55:53 PM, last modified Thursday 10 June 2021, 01:08:00 PM.

    Hi everyone,

    I hope everyone is enjoying the course so far. Congratulations on finishing the first week.

    We understand that some people are having some trouble with the tooling for the course, and some of the content for Week 1. So Adam is holding a consultation this Thursday (Jun 10) at 1pm-3pm in Ainsworth J17-102. Feel free to pop in and ask any questions.

  • Welcome to cs6447

    Posted by Adam Tanana Thursday 27 May 2021, 04:45:42 PM.

    Hi everyone, my name is Adam and welcome to my TED talk!
    The COMP6447 teaching staff are all very excited for this course! The course outline is out now for your perusal. If you have any questions, please feel free to email us or message us on slack!

    To help you prepare for this course, we've come up with a list of prerequisite knowledge that will help throughout course:

    • how process memory is laid out
    • pointers
    • endianness
    • difference between regions of memory (stack, heap, text, data)
    • virtual memory/page table
    • familiarity with using Linux, and Linux general knowledge
    • Linux file system
      • system calls
      • etc.
    • familiarity with using gdb


    If you are unfamiliar with any of these topics, please try to review them -- COMP1521 and Operating Systems course notes are good places to find the relevant information.
    We also recommend that you have also access to a Linux machine - a VM is fine. On that box, you should install pwndbg , pwntools , and binary ninja .


    Forum
    This course has a lot of self learning involved. This is always difficult, especially if you've never done such a hands-on course before. We recommend joining the course discussion which can be found at https://seceduau.slack.com , in the #comp6447 channel, a lot of informal course discussion will occur here, and it is the perfect place to look for help from both course staff as well as other students when you are stuck.


    Enjoy the rest of your holidays, looking forward to seeing people in person hopefully for our first lecture next Monday at 6pm!


    .. There are also 4 polls we've added to gauge everyones situation. Please fill them out if you have a chance!


Back to top

COMP6447 21T2 (System and Software Security Assessment) is powered by WebCMS3
CRICOS Provider No. 00098G