Injection on Steroids - Code Less Code Injections and 0 Day Techniques

Injection on Steroids - Code Less Code Injections and 0 Day Techniques

Explore advanced code injection techniques and zero-day vulnerabilities in this BSidesLV 2015 conference talk. Delve into classic code injection methods before examining PowerLoader's innovative approaches, including abusing shared sections and ROP techniques. Learn about desktop heap exploitation and strategies for 64-bit systems. Investigate kernel-to-user code injections, covering common methods like User APC, entry point patching, and import table patching. Discover the intricacies of Trap Frame injection and KTRAP_FRAME. Conclude with an in-depth look at codeless code injection, addressing challenges and demonstrating practical applications through API examples.