Exploit Tutorial

We have a requirement for an in-depth tutorial on how common programming mistakes are exploited. Buffer Overflows, Heap Overflows, Format Strings, Race Conditions, SQL Injection, and Cross Site Scripting should all be thoroughly explained with example code, and utilize core dumps, debugger screenshots, and any other resources to help explain how it actually works. This tutorial should be geared toward an IT professional audience with some programming experience. The tutorial should be done in parts (part 1, part 2, part 3, etc), and must be at least 7 written pages in length. If we find several good candidates here on RAC we will continue to post these bid requests here, but we will also very seriously entertain the possibility of entering into an agreement with the writer for more tutorials of this type if we are pleased with the work that we are given from this project. We would like the bidders to submit a 1.5 - 3 written page tutorial on this topic so we may evaluate the bidder’s writing style (this submission may be used as part 1 of the total article. We are really looking for people that can write good tutorials geared toward beginners in the information technology and information assurance/security field. Screenshots, diagrams, cited references are an absolute must, and will NOT be counted towards the total page length of the submitted document. We prefer that documents be submitted in one of the following file types: .doc/.pdf/.html ## Deliverables 1) Complete and fully-functional working program(s) in executable form as well as complete source code of all work done. 2) Deliverables must be in ready-to-run condition, as follows? (depending on the nature? of the deliverables): a)? For web sites or? other server-side deliverables intended to only ever exist in one place in the Buyer's environment--Deliverables must be installed by the Seller in ready-to-run condition in the Buyer's environment. b) For all others including desktop software or software the buyer intends to distribute: A software? installation package that will install the software in ready-to-run condition on the platform(s) specified in this bid request. 3) All deliverables will be considered "work made for hire" under U.S. Copyright law. Buyer will receive exclusive and complete copyrights to all work purchased. (No GPL, GNU, 3rd party components, etc. unless all copyright ramifications are explained AND AGREED TO by the buyer on the site per the coder's Seller Legal Agreement). ## Platform We prefer that documents be submitted in one of the following file types: .doc/.pdf/.html