Advanced Buffer Overflow Techniques
Greg Hoglund - Advanced Buffer Overflow Techniques This is a technical talk aimed at people who have already been exposed to buffer overflows and want to learn more.
Summary
Architecture and Background
Greg Hoglund - Advanced Buffer Overflow Techniques This is a technical talk aimed at people who have already been exposed to buffer overflows and want to learn more.
Vulnerability Analysis
The talk assumes the audience has at least some knowledge of CPU's and Processes.
Exploitation and Demonstrations
For those of you who already understand buffer overflows, this talk will be a refreshing discourse on technique.
Remediation and Defensive Strategies
We will show how the injection method can be decoupled from the payload. We then explore the details and challenges of injecting code into a remote process. We will also explore the payload, the encoding methods, and how to dynamically load new functions. Lastly, we discuss the possible effects of a payload, including network worms, virus, and rootkits.
Related talks
Main Stage·39 min
Jake Labelle
Jake Labelle demystifies IBM z/OS mainframe security, demonstrating how to find and exploit memory corruption buffer overflows in legacy enterprise mainframes.
Main Stage·43 min
Hadrien Barral
Hadrien Barral demonstrates crafting fully functional executable shellcode consisting entirely of valid multi-byte UTF-8 emoji characters.
Main Stage·35 min
Anders Ingeborn
Anders Ingeborn explores designing small payloads at DEF CON 9, examining payload-crafting and practical defenses.