Exploit › Module 10 › Lesson 1
Checklist
Topic 24 capstone checklist — memory mindset, classes, stack/heap, protections, secure build, crash observe, CTF awareness, history/CVE, reporting on $PWN_LAB.
Visual · t24_capstone_checklist
Checklist consolidates exploit dev literacy pillars. $PWN_LAB only. Original Cyberlium.
Opening
Capstone proves memory-safety literacy on YOUR toys — not a portfolio of exploit weapons.
Assemble checklist covering Modules 1–9: memory safety mindset, corruption classes named, stack/heap literacy, protections checksec, secure build hygiene, crash reproduce/GDB/triage, CTF pwn awareness, historic/CVE/patch mindset, defender report. Use on capstone walk of YOUR $PWN_LAB toy chain — never weapon PoCs, stranger targets, ROP/shellcode rows, or pwntools exploit deliverables. Each row links artifact or honest N/A. Notes chmod 600 under $HOME/cyberlium-lab. Integrity rows: YOUR toys only, observe-not-weaponize, remediation verified.
1. Scope and ethics
$PWN_LAB named with YOUR toy source chain. NEVER weapon PoC, stranger prod, ROP/shellcode homework, public exploit drop.
CTF awareness row: named types and rules — not remote attack evidence.
Command guide
Try these commands — Scope and ethics
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Capstone checklist — https://pwn.college/ (skills map after literacy) checksec — https://github.com/slimm609/checksec.sh Microsoft SDL — https://learn.microsoft.com/en-us/security/sdl/ (production checklist)
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
pipx install checksec.py # or: sudo apt install checksec
macOS:
Command — copy this
pipx install checksec.py
Windows: Use WSL or install file for Windows Use WSL: pipx install checksec.py
═══ LINUX / macOS ═══
Command — copy this
export LAB_PWN=${LAB_PWN:-$HOME/cyberlium-lab/t24-pwn}
cat > "$LAB_PWN/notes/capstone-checklist.txt" <<'EOF'
[ ] YOUR vuln + safe C toys compiled
[ ] checksec/readelf: NX, Canary, PIE, RELRO understood
[ ] gdb crash observed — no exploit chain built
[ ] remediation flags applied + findings drafted
[ ] roe: never weaponize / strangers off-limits
EOFCommand — copy this
grep '\[ \]' "$LAB_PWN/notes/capstone-checklist.txt"
file "$LAB_PWN/bin/"{build_vuln,build_safe,remediation_demo} 2>/dev/null
if command -v checksec >/dev/null 2>&1; then checksec --file="$LAB_PWN/bin/remediation_demo"; fiPrimary tools to practice this lesson: grep, file, checksec. Reference sites: Capstone checklist (https://pwn.college/); checksec (https://github.com/slimm609/checksec.sh); Microsoft SDL (https://learn.microsoft.com/en-us/security/sdl/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Literacy pillars
Classes, protections, build flags, crash observe, CVE read, report with remediation — linked rows.
Cross-link Topic 23 RE if same toy hash used for checksec only.
3. Teardown
Notes secured chmod 600, report pack ready, mentor handoff optional.
Purple paragraph: how literacy helps blue prioritize patches and dev hardening.
4. What you ship: Topic 24 capstone checklist
One-page literacy capstone checklist for $PWN_LAB YOUR toys.
5. What you record before the next lesson
Checklist file path.
6. Wrong vs right: weaponized exploits vs memory-safety literacy
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Checklist includes row 'ship working exploit for bonus.'
Right
Checklist written. Next: Lab Path.
Mission: write capstone checklist
1) Ethics/scope section. 2) Modules 1–9 pillar rows. 3) Teardown and purple paragraph section.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Top five capstone artifacts?”
Knowledge Check
APPLY: Checklist includes:
Multiple choice
Knowledge Check
APPLY: True or False: Weapon PoC row required for capstone credit.
True or False
Knowledge Check
APPLY: Teardown includes:
Multiple choice