Notices

  • 6447 exam skeleton

    Posted by Adam Tanana Monday 01 December 2025, 08:57:57 PM.

    Hey all

    The exam skeleton is now finalised. The binaries are available for download now from exam.6447.lol

    Please have a read of the exam instructions on each page in preparation for tomorrow. I recommend also downloading the files before the exam incase of internet issues.

    Please be outside the exam room (J17 203) by 1:20pm and Good Luck!!!

  • COMP6447 Final Exam Detail, Help Sesh and Practice Exam

    Posted by Adam Tanana Saturday 29 November 2025, 10:32:48 PM.

    Hey all, Hopefully studies are going well. Some updates

    Reminder there is a past exam available at https://2024.exam.6447.lol /. I recommend attempting this after you are done studying each section of the course under timed conditions.

    The solutions for the p ast exams are at https://files.6447.lol/2024-final/examsols.zip and https://files.6447.lol/2023-final/sols.zip


    The skeleton for the final exam is available at exam.6447.lol . Please read the instructions carefully and ask if you have any questions. The exam binaries and questions will be available for download soon (I will send another email).

    Please note the exam is in person. You should have been emailed your allocated seating. If you have not, please read carefully all instructions here . You must sit in your assigned seat, and have a form of ID for the invigilators to check.

    The exam will be run on your own machines. If you don't have a laptop - Tell me ASAP. There are no excuses on the day.

    • The exam will start sharply at 1:45 PM. You must be ready outside the exam room by 1:20 PM. If you are late, you may miss key instructions


  • Reminder: final help session tomorrow

    Posted by Lachlan Waugh 🍉 Thursday 27 November 2025, 10:05:30 AM.

    Hey everyone, a reminder that tomorrow (Friday the 28th) we will be hosting the last help session of the course, it'll be running in Ainsworth 102 at 6pm.

    As with the previous ones, they'll run as long as you all have questions. There's no pre-prepared topics/content, this will purely be an open-air question-answer forum , so make sure you come with questions.

    This session won't be recorded or live-streamed.

  • Revision Workshop hosted by SecSoc

    Posted by Lachlan Waugh 🍉 Wednesday 26 November 2025, 02:52:31 PM, last modified Wednesday 26 November 2025, 02:53:10 PM.

    Hey everyone,

    Hope your exam revision is going well.

    The Security Society is going to be hosting a revision workshop today at 5pm today in SecLab (K17 G11), it will also streamed via discord which you can join via https://secso.cc/discord / https://discord.gg/vEhQ8Trg?event=1440682466011775107 , I'd recommend checking it out as it's run by people who have done the course in recent years.

    They've also put together some challenges that you could use as practice available at http://ctf.secso.cc/ (they should become available during the session).

  • Help Sessions Friday 6pm

    Posted by Lachlan Waugh 🍉 Thursday 13 November 2025, 01:42:09 PM, last modified Thursday 13 November 2025, 01:42:49 PM.

    Hey everyone, we'll be hosting some more help sessions, on Friday at 6pm for the next 3 weeks.

    They will be running in:

    • Ainsworth 202 on the 14th,
    • Ainsworth 102 on the 21st/28th.

    As with the previous ones, they'll run as long as you all have questions. There's no pre-prepared topics/content, this will purely be an open-air question-answer forum , so make sure you come with questions.

    This session won't be recorded or live-streamed.

  • Help Session Friday 6pm

    Posted by Lachlan Waugh 🍉 Wednesday 29 October 2025, 10:50:55 AM.

    Hey everyone, we've decided to host another help session.

    It'll be running on Friday 6-8pm in Ainsworth 102 , and will cover anything that's been discussed in the lectures.

    Similar to the last one, it'll run as long as you all have questions. There's no preprepared topics/content, this will purely be an open-air question-answer forum , so make sure you come with questions

    This session won't be recorded or live-streamed, and apologies if the time doesn't work for you.

  • Online Help Session and Midterm walkthrough

    Posted by Adam Tanana Friday 17 October 2025, 11:02:52 AM.

    Hi Folks, hope the term is going well.

    Next week on Monday at 6pm, I will be walking through the solutions to the midterm.

    After that I will be running a generic help sessions to help with any course content we have covered so far.

    I'll stay as late as students have questions. Note : I won't be preparing content , this is purely going to be an open-air question/answer forum . Come with questions please :) Apologies if the time doesn't work for you. This session won't be recorded or live-streamed!


    Zoom: https://unsw.zoom.us/j/84563135287?pwd=6axj9SLTVjp5yDWRezbcUqZbbP8x3Q.1

    checked Passcode: 512301

  • Major Fuzzer Assignment

    Posted by Adam Tanana Monday 13 October 2025, 10:52:03 PM.

    Hi All,

    Like I announced in the Lecture today, the spec for the Major Fuzzer Assignment is available at https://fuzzer.6447.lol/ .

    The detailed spec is available on https://fuzzer.6447.lol/spec


    Please read this carefully. There are several due dates for different sections of the assignment.

    You must register your group by the end of Week 6, or you risk getting zero for the midpoint submission.

  • Midterm Wargame Details

    Posted by Adam Tanana Wednesday 08 October 2025, 09:09:43 PM.

    Hey all, some details about the upcoming midterm wargame.

    Details:

    • There will be 3 exploitation questions (involving topics from buffer overflows, format string and/or shellcode only) to solve, and fetch flags from the server (similar to wargames)
    • All instructions are available on the exam website https://midterm.6447.lol/ . Make sure you have access to this site, and understand the instructions BEFORE beginning the exam.
    • Between Monday, 13 Oct 12:00:00 AEDT to Fri, 18 Oct 18:00:00 AEDT you must attempt and submit this exam. It is worth 10% of the final mark. All submissions must be made within 2 hours of beginning the exam . No late submissions are allowed.
    • Once you begin the exam (By pressing "Start"), the website will show you the password to decrypt the challenges, as well as the server Domain and Port for the challenges.You must submit within 2 hours of starting the exam
    • The challenge files will be made available soon.
    • Submission will be done using Give ( Details will appear on the exam website ). The format for submission is available on the exam website

    Practice Exam

    We have made a practice exam (That will look exactly like the midterm wargame next week) available at https://2024.midterm.6447.lol/ .

  • Fmt string Lecture recording

    Posted by Adam Tanana Tuesday 07 October 2025, 12:37:55 PM.

    Hey all lecture recording details for last nights lecture are


    https://unsw.zoom.us/rec/share/XSNIqAabdObxuLF9ivQXXbQOyMWbB97_43NZoFxCl53K19d3uD_YIYU-2byI3cLu.G_Vy5QiQgTYw5Zuy

    Passcode: r==7nq6i

  • Week 4 lecture

    Posted by Adam Tanana Monday 06 October 2025, 09:56:28 AM, last modified Monday 06 October 2025, 06:07:52 PM.

    Hey all,

    The lecture in week 4 falls on a public holiday. I will still give a lecture (via zoom and recorded), but it is not compulsory to watch live. However, please make sure to watch the lecture before attending tutorials/wargames/midterm.


    Updated zoom details - The call is https://unsw.zoom.us/j/83151418637?pwd=adeJr0OOUKXc16UaC8guYxuSH98Yp0.1

    The details for lecture today at 6pm are https://unsw.zoom.us/j/89112023273?pwd=PtS70S8nB7uBMGoaCwxD2Zg8N2NG55.1

    Password: 123456


  • Mac Setup Tutorial

    Posted by Adam Tanana Monday 22 September 2025, 04:01:44 PM.

    Hey all, hope your week is going well and the first set of wargames went smoothly.

    Some students have reached out regarding difficulty setting up the environment on an ARM Mac. We have put together a tutorial at https://guides.6447.lol/mac that you can follow to hopefully setup a local environment on one of these devices, or a guide on how to setup a DigitalOcean droplet.

  • Welcome to COMP6447

    Posted by Adam Tanana Saturday 13 September 2025, 03:52:40 PM.

    Hey everyone.

    Hope you are all super excited to take COMP6447 this term. Before we start the First Lecture, some quick admin to sort out

    Course Forum

    This year we will be using Discourse as the course forum. Please sign up and login using https://discourse02.cse.unsw.edu.au/25T3/COMP6447/ . This will be the best place to get help from either your peers, tutors or me throughout the course. The best way to reach course staff will be either through Discourse or via Email.

    Course Outline

    The course outline is available on WebCMS. Please review it, it has important information about the course content and examinations.

    Classes In Person

    The lectures for this term are on Mondays, and will be covering content that is critical to both the weekly tutorials, and weekly wargames. It is super important that you are able to attend lectures and tutorials where possible. There are no online classes this term (Please reach out if this is a problem ASAP). We will try to record all lectures and release them (But make no promises to release them before your tutorials)

    Some resources to look at before we begin

    To help you prepare for this course, we've come up with a list of helpful prerequisite knowledge that you should revise (or skim over for the first time) before starting the course. These include:

    • How process memory is laid out
      • pointers
      • endianness
    • Difference between regions of memory (stack, heap, text, data)
    • Virtual memory/page table
    • Difference between kernel vs user space
    • Familiarity with using Linux, and Linux general knowledge
      • Linux file system
      • system calls
      • etc.
    • Familiarity with using GDB and python

    If you aren't familiar with some of these topics, that's fine. I recommend reviewing them before starting the course to make your experience smoother.

    I also recommend you have access to a Linux machine, A Linux Virtual Machine (or docker contains), with PwnTools , PwnDBG and BinaryNinja installed. These will be required to do many of the challenges in this Course. If you have issues installing anything, that's fine (Lab 1 is about helping you get ready, so no need to panic if you are unsure about anything).

    Also, I've setup 4 polls under Activities to better guage everyone's understanding of different topcis. Please take a look when you get a chance.


Back to top

COMP6447 25T3 (System and Software Security) is powered by WebCMS3
CRICOS Provider No. 00098G