Главная
Study mode:
on
1
Intro
2
Story behind Capstone
3
Binary analysis & software exploit
4
Disassemble machine code
5
X86 instruction encoding
6
Building disassembly frameworks is tedious
7
Demanding for a good disassembly framework
8
Available frameworks (2013)
9
Capstone's goals
10
Problems
11
Capstone status at 7-month old
12
Ambitions & ideas
13
Introduction on LLVM
14
LLVM's Machine Code (MC) layer
15
Advantages
16
Decide where to make the cut
17
extend LLVM's MC
18
Robustness of Capstone
19
Tricky X86 instructions
Description:
Explore the groundbreaking Capstone disassembly framework in this 52-minute Black Hat conference talk by Quynh Nguyen Anh. Dive into the world of multi-architecture machine code analysis, reversing, and exploit development. Learn about the limitations of existing disassembly frameworks and discover how Capstone addresses these issues with its innovative features. Gain insights into the engine's architecture, implementation challenges, and its support for multiple architectures and platforms. Understand the advantages of Capstone's clean API, thread-safe design, and special support for firmware and OS kernel embedding. Explore cutting-edge binary analysis frameworks built on Capstone and their potential applications in reversing, exploitation development, and malware detection. Discover the future possibilities of this open-source disassembly engine and its impact on the security community.

Next Generation Disassembly Framework

Black Hat
Add to list
0:00 / 0:00