6. Kévin Tellier & Hugo Vincent: DDD: DCOM, DotNet, Deserialization Kevin&Hugo
Engineers explore architecture and security mechanisms for 6. Kévin Tellier & Hugo Vincent: DDD: DCOM, DotNet, Deserialization Kevin&Hugo.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Main Stage·35 min
Jonathan Birch
Jonathan Birch demonstrates novel .NET deserialization RCE attacks that bypass standard assumptions, exploiting database drivers and immutable data streams.
dotnetdeserializationrce+2
x33fcon·40 min
Analysts investigate attack surfaces and defenses concerning 16. Hugo Valette: Taming the Windows Module Loading for Stealthy Injection.
windowsinjectionhugo+3
Videos·39 min
Alvaro Muñoz
Alvaro Muñoz analyzes Attacking .NET deserialization.
deserializationattackingvulnerability-research