exploiting heap overflows

Windows Heap Overflows David Litchfield <david@ngssoftware.com>

This presentation will examine how to exploit heap based buffer overflows on the Windows platform. Heap overflows have been well documented on *nix platforms, for example Matt Connover’s paper – w00w00 on heap overflows, but they’ve not been well documented on Windows, though Halvar Flake’s Third Generation Exploits paper covered the key concepts. Windows Heap Overflows Introduction

[object Object],[object Object],Windows Heap Overflows Heap based buffers are safe…. ?????

[object Object],Windows Heap Overflows What is a heap?

Windows Heap Overflows Heap functions

[object Object],Windows Heap Overflows Heap Design

[object Object],[object Object],[object Object],[object Object],[object Object],Windows Heap Overflows Heap Design

[object Object],Windows Heap Overflows So where’s the problem?

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Windows Heap Overflows So where’s the problem?

[object Object],[object Object],[object Object],[object Object],[object Object],Windows Heap Overflows Exploiting Heap Overflows

[object Object],[object Object],Windows Heap Overflows Repairing the heap

[object Object],Windows Heap Overflows Repairing the heap

[object Object],Windows Heap Overflows Exploit: Using the Unhandled Exception Filter

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Windows Heap Overflows Exploit: Using the Unhandled Exception Filter

[object Object],[object Object],Windows Heap Overflows Exploit: Using the Unhandled Exception Filter

[object Object],[object Object],[object Object],Windows Heap Overflows Exploit: Using the Unhandled Exception Filter

[object Object],[object Object],Windows Heap Overflows Exploit: Using Vectored Exception Handling

[object Object],Windows Heap Overflows Exploit: Using Vectored Exception Handling

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Windows Heap Overflows Exploit: Using Vectored Exception Handling

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Windows Heap Overflows Exploit: Using Vectored Exception Handling

[object Object],[object Object],[object Object],[object Object],Windows Heap Overflows Exploit: Using Vectored Exception Handling

[object Object],[object Object],[object Object],Windows Heap Overflows Exploit: RtlEnterCriticalSection pointer in the PEB

[object Object],Windows Heap Overflows Exploit: RtlEnterCriticalSection pointer in the PEB

[object Object],[object Object],Windows Heap Overflows Exploit: RtlEnterCriticalSection pointer in the PEB

[object Object],Windows Heap Overflows Exploit: TEB Exception Handler Pointer

[object Object],[object Object],Windows Heap Overflows Exploit: TEB Exception Handler Pointer

[object Object],Windows Heap Overflows Exploit: Getting Creative!

[object Object],[object Object],Windows Heap Overflows Exploit: Getting Creative!

[object Object],[object Object],Windows Heap Overflows Conclusion

[object Object],Windows Heap Overflows Thanks for coming!

exploiting heap overflows

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Semelhante a exploiting heap overflows

Semelhante a exploiting heap overflows (20)

Último

Último (20)

exploiting heap overflows