Update Binary_Exploitation.md

Exploitation/Binary_Exploitation.md

@@ -45,14 +45,15 @@ Check security protections on a binary:
     pattern offset waab   #get the offset 
 
 ## Memory Protections   
-NX: no execute.     
+NX: Nonexecutable Stack ret2libc - NX bypass.             
 DEP: Data Execution Prevention, the CPU will not execute code in the heap or stack.       
-ASLR:      
-Canary:   
-
+Stack Canary:      
+ASLR:  address space layer randomization. Instead of preventing execution on the stack - randomize the stack memory layout. Attacker won't know where the waiting shellcode is to return execution into it.          
 Switch off ASLR:      
 
                 echo 0 > /proc/sys/kernel/randomize_va_space    
+PIE - Position Independent Executables (PIE), protects against ROP attacks. The binary and it's dependancies are loaded into random locations in virtual memory each time the program is executed.            
+
 ## Return Oriented Programming    
 Avoid DEP    
 https://bordplate.no/blog/en/post/what-is-rop/