PhantomRPC: A New Privilege Escalation Flaw in Windows RPC
Engineers explore architecture and security mechanisms for PhantomRPC: A New Privilege Escalation Flaw in Windows RPC.
Summary
Black Hat session on PhantomRPC: A New Privilege Escalation Flaw in Windows RPC.
Related talks
Main Stage·36 min
Ron Ben Yizhak
Introduces RPC Racer, a technique that exploits race conditions in Windows RPC endpoint registration to hijack privileged system service communication.
windowsrpcrace-conditions+2
Black Hat·21 min
Wenxu Wu
Analysts investigate attack surfaces and defenses concerning Battle of Windows Service: A Silver Bullet to Discover File Privilege Escalation Bugs Automatically.
privilege-escalationwindowsbattle+3
Black Hat·57 min
Analysts investigate attack surfaces and defenses concerning Extreme Privilege Escalation on Windows 8/UEFI Systems.
privilege-escalationwindowsuefi