Главная
Study mode:
on
1
Intro
2
Why USB based attacks?
3
CVE-2016-2384: what is it about?
4
USB probing process
5
CVE-2016-2384: what happens with the heap?
6
The midi object
7
Exploitation primitive
8
USB HID Probing
9
Development environment: QEMU
10
Payload delivery method
11
Where to hijack the code?
12
Payload design
13
Exploit payload
14
Run shell commands
15
Attack challenges
16
Exploit mitigations
17
Applicability
18
Exploitation Requirements
19
Takeaways
Description:
Explore a Black Hat conference talk that delves into exploiting a forgotten vulnerability in the USB stack of the Linux kernel. Learn about CVE-2016-2384, originally discovered by Andrey Konovalov, and how it can be used to gain root access on a seemingly secure Linux-based device. Discover the intricacies of USB-based attacks, the USB probing process, and exploitation techniques. Examine the development environment using QEMU, payload delivery methods, and exploit design. Understand the challenges faced during the attack, potential exploit mitigations, and the applicability of this vulnerability. Gain insights into the exploitation requirements and key takeaways from this 33-minute presentation by Martijn Bogaard and Dana Geist.

Achieving Linux Kernel Code Execution Through a Malicious USB Device

Black Hat
Add to list
0:00 / 0:00