Designing Small Payloads
Anders Ingeborn explores designing small payloads at DEF CON 9, examining payload-crafting and practical defenses.
Summary
Architecture and Background
Description from DEF CON 9 Speaker’s Page: Designing small payloads This talk presents how to use double injection over an existing network connection to write small remote buffer overflow exploits.
Vulnerability Analysis
A number of practical tips and code examples will be given.
Exploitation and Demonstrations
It will also be explained how this design can be used to hide an attack from both network based and host based intrusion detection systems.
Remediation and Defensive Strategies
Anders Ingeborn works with vulnerability assessment and penetration tests at iXsecurity in Sweden. iXsecurity's clients during the last couple of years include government agencies, banks, nuclear power plants and major corporations throughout Scandinavia. Anders also holds a MS in computer security.
Related talks
Main Stage·43 min
Hadrien Barral
Hadrien Barral demonstrates crafting fully functional executable shellcode consisting entirely of valid multi-byte UTF-8 emoji characters.
Main Stage·57 min
Greg Hoglund
Greg Hoglund - Advanced Buffer Overflow Techniques This is a technical talk aimed at people who have already been exposed to buffer overflows and want to learn more.
Main Stage·40 min
David Litchfield
David Litchfield details oracle Data Redaction is Broken David Litchfield SECURITY SPECIALIST, DATACOM TSS The Oracle data redaction service is a new feature introduced with Oracle 12c.