Teaching Old Shellcode New Tricks

Teaching Old Shellcode New Tricks

Explore advanced techniques for bypassing modern security measures in this conference talk from Recon 2017 Brussels. Delve into the challenges faced by Metasploit x86 shellcode against EMET and other defensive technologies, both in exploit payloads and non-exploit scenarios. Learn how to incorporate bypass techniques for Caller/EAF[+] checks post ASLR/DEP bypass, and discover the process of merging these methods with automation to create more effective payloads. Gain insights from Josh Pitts as he shares both the successes and failures encountered in this endeavor to breathe new life into old shellcode.