Return to the Zombie Gadgets - Undermining Destructive Code Reads via Code-Inference Attacks
Explores techniques to bypass destructive code reads, a defensive strategy against code reuse attacks, through constructive reloads and code association via implicit reads, demonstrating vulnerabilities in this security approach.
Evaluation of the Executional Power in Windows Using Return Oriented Programming
Explore Windows vulnerabilities through Return Oriented Programming, evaluating execution power and discussing implications for system security in this IEEE workshop presentation.
Hardware Protections Against ROP Attacks
Explore hardware-based defenses against Return-Oriented Programming (ROP) attacks with IBM expert Mike Rapoport, focusing on cutting-edge security measures for system protection.
Thread-Level Attack-Surface Reduction for Enhanced Security
Explore thread-level attack-surface reduction, a dynamic approach to eliminate unused code on a thread level, significantly reducing ROP gadgets and enhancing security in multi-threaded applications.
Spectre Attacks Exploiting Speculative Execution
Explore speculative execution vulnerabilities in modern processors, their impact on system security, and potential countermeasures to protect against Spectre attacks.
ROP with a 2nd Stack, or This Exploit is a Recursive Fibonacci Sequence Generator
Explore advanced ROP techniques using a second stack, delving into recursive Fibonacci sequence generation as an exploit method. Gain insights into innovative cybersecurity approaches.
How to Cook Cisco: Exploit Development for Cisco IOS - George Nosenko - Ekoparty Security Conference - 2017
Exploración técnica de vulnerabilidades en Cisco IOS, incluyendo bypass de DEP, ROPing, shellcode en etapas y evasión de mecanismos de integridad. Incluye demostraciones prácticas y código fuente.
ROP is Still Dangerous - Breaking Modern Defenses
Explores advanced Return Oriented Programming attacks, demonstrating vulnerabilities in modern defense mechanisms and proposing strategies to overcome security measures like kBouncer and ROPecker.
Enter Sandbox
Explore automated seccomp filter generation for Linux applications, enhancing security through sandboxing and system call restrictions without manual developer intervention.
Uncommon Sense - Detecting Exploits with Novel Hardware Performance Counters and ML Magic
Explore novel hardware performance counters and machine learning techniques to detect advanced exploits like speculative execution, Rowhammer, and ROP, enhancing cybersecurity defenses against evolving threats.
Return to Where? You Can't Exploit What You Can't Find
Explore advanced techniques for detecting and preventing memory corruption vulnerabilities, including execute-only memory and code pointer hiding, to enhance software security against sophisticated exploitation methods.
ROPInjector - Using Return Oriented Programming for Polymorphism and Antivirus Evasion
Explore advanced polymorphism techniques using Return Oriented Programming for antivirus evasion, with practical demonstrations of the ROPInjector tool and its effectiveness against detection methods.
Hardware-Enforcement of Walther-Recursive Program Functions
Explore hardware-enforced restrictions on computational complexity using JIT compilation and Intel's Processor Tracing to improve security through limited return-oriented programming.
Software Security Era - Past, Present, and Future
Explore the evolution of memory corruption exploitation, from early techniques to modern mitigations. Includes live demos of vulnerabilities and discusses the ongoing challenges in software security.
Automatic Generation of ROP Chains
Introduces EasyROP, a tool for automating ROP attacks by finding gadgets in binary files. Analyzes Windows libraries for attack feasibility and demonstrates a real-world application on CVE-2010-3333.
Exploiting a Limited UAF on Ubuntu 22.04 to Achieve LPE
Detailed exploration of exploiting a Linux kernel vulnerability in Ubuntu 22.04 to achieve local privilege escalation, focusing on advanced exploitation techniques and bypass methods.
Jumping the Fence - Comparison and Improvements for Existing Jump Oriented Programming Tools
Explore Jump Oriented Programming, comparing tools and discussing improvements. Covers gadget search, comprehension strategies, and architecture support for various platforms including ARM and AVR.
The Beast is in Your Memory
Explore advanced exploitation techniques and control-flow integrity mechanisms. Learn about Return-Oriented Programming, its countermeasures, and how to bypass emerging CFI solutions.
OptiROP - Hunting for ROP Gadgets in Style
Discover efficient ROP gadget hunting with OptiROP, a tool using semantic queries for quick, precise results across executable formats on x86/x64 architectures. Simplify shellcode development.
Return Oriented Programming, an Introduction
Learn the mechanics of Return Oriented Programming, an exploitation technique. Explore examples demonstrating code execution in contexts with non-executable stacks.
Jumping the Fence - Comparison and Improvements for Existing Jump Oriented Programming Tools
Exploring Jump Oriented Programming tools, comparing techniques, and discussing improvements. Covers dispatcher gadgets, functional gadgets, and AVR support with demos and practical insights.