# Breaking Bits

## Breaking Bits

- [What this gitbook is](https://breaking-bits.gitbook.io/breaking-bits/master.md)
- [Reverse Engineering](https://breaking-bits.gitbook.io/breaking-bits/vulnerability-discovery/reverse-engineering.md)
- [Modern Vulnerability Research Techniques on Embedded Systems](https://breaking-bits.gitbook.io/breaking-bits/vulnerability-discovery/reverse-engineering/modern-approaches-toward-embedded-research.md)
- [Remote Dynamic Blackbox Java App Analysis](https://breaking-bits.gitbook.io/breaking-bits/vulnerability-discovery/reverse-engineering/remote-dynamic-blackbox-java-jar-analysis.md): Java Bytecode Debugging and Dynamic Instrumentation Through Eclipse
- [Emulation](https://breaking-bits.gitbook.io/breaking-bits/vulnerability-discovery/emulation.md)
- [QEMU Usermode Tracing](https://breaking-bits.gitbook.io/breaking-bits/vulnerability-discovery/emulation/qemu-usermode-tracing.md)
- [Building QEMU on Ubuntu](https://breaking-bits.gitbook.io/breaking-bits/vulnerability-discovery/emulation/building-qemu-on-ubuntu.md)
- [Fuzzing with AFL](https://breaking-bits.gitbook.io/breaking-bits/vulnerability-discovery/fuzzing-with-afl.md)
- [Automated Vulnerability Discovery](https://breaking-bits.gitbook.io/breaking-bits/vulnerability-discovery/automated-exploit-development.md)
- [Buffer Overflows](https://breaking-bits.gitbook.io/breaking-bits/vulnerability-discovery/automated-exploit-development/buffer-overflows.md): Using angr to find overflows
- [Analyzing Functions](https://breaking-bits.gitbook.io/breaking-bits/vulnerability-discovery/automated-exploit-development/analyzing-functions.md): angr to analyze and trace functions
- [Automatic Exploit Generation](https://breaking-bits.gitbook.io/breaking-bits/vulnerability-discovery/automatic-exploit-generation.md)
- [Automatic Rop Chain Generation](https://breaking-bits.gitbook.io/breaking-bits/vulnerability-discovery/automatic-exploit-generation/automatic-rop-chain-generation.md)
- [Battelle Shmoocon 2024](https://breaking-bits.gitbook.io/breaking-bits/battelle-shmoocon-2024.md)
- [Time Jump Planner](https://breaking-bits.gitbook.io/breaking-bits/battelle-shmoocon-2024/time-jump-planner.md): No ROP, no SROP, full RELRO, ASLR, DEP, no execve pwn inside of QEMU
- [Spaceheros CTF 2022](https://breaking-bits.gitbook.io/breaking-bits/spaceheros-ctf-2022.md)
- [RE: Shai-Hulud](https://breaking-bits.gitbook.io/breaking-bits/spaceheros-ctf-2022/re-shai-hulud.md)
- [UMDCTF 2020](https://breaking-bits.gitbook.io/breaking-bits/umdctf-2019.md)
- [UMDCTF 2020: Evil Santa's Mysterious Box of Treats](https://breaking-bits.gitbook.io/breaking-bits/umdctf-2019/umdctf-2019-evil-santas-mysterious-box-of-treats.md): Patching and Instruction counting towards first blood.
- [UMDCTF 2022](https://breaking-bits.gitbook.io/breaking-bits/umdctf-2022.md)
- [Tracestory](https://breaking-bits.gitbook.io/breaking-bits/umdctf-2022/tracestory.md)
- [Spaceheroes CTF 2023](https://breaking-bits.gitbook.io/breaking-bits/spaceheroes-ctf-2023.md)
- [Everything-is-wrong](https://breaking-bits.gitbook.io/breaking-bits/spaceheroes-ctf-2023/everything-is-wrong.md): Writing a debugger to side-channel out comparisons with RAX values
- [US CyberGames RE-Cruise 4](https://breaking-bits.gitbook.io/breaking-bits/us-cybergames-re-cruise-4.md): The wrong way to solve this problem
- [Interactive Firmware Emulator Usage](https://breaking-bits.gitbook.io/breaking-bits/interactive-firmware-emulator-usage.md)
- [Recreating CVE-2015-1187 in the DIR-820L](https://breaking-bits.gitbook.io/breaking-bits/recreating-cve-2015-1187-in-the-dir-820l.md): Adding Cat gifs to the DIR-820L using CVE-2015-1187 with the firmware emulator
- [Linux kernel exploit development](https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development.md)
- [Setup](https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development/setup.md)
- [Interacting with Kernel Modules](https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development/interacting-with-kernel-modules.md)
- [Kernel stack cookies](https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development/stack-cookies.md)
- [Kernel Address Space Layout Randomization (KALSR)](https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development/kernel-address-space-layout-randomization-kalsr.md)
- [Supervisor mode execution protection (SMEP)](https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development/supervisor-mode-execution-protection-smep.md)
- [Kernel page table isolation (KPTI)](https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development/kernel-page-table-isolation-kpti.md)
- [Supervisor Mode Access Prevention (SMAP)](https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development/supervisor-mode-access-prevention-smap.md)