Abusing Performance Optimization Weaknesses to Bypass ASLR

Abusing Performance Optimization Weaknesses to Bypass ASLR

Explore techniques for bypassing Address Space Layout Randomization (ASLR) by exploiting performance optimization vulnerabilities in a 45-minute Black Hat conference talk. Delve into how hash table designs in programming languages like JavaScript, Python, and Ruby can leak address information, compromising ASLR security. Examine the Zygote process creation model in Android and its impact on ASLR effectiveness. Learn about real-world attacks demonstrated on Safari web browser, Google Chrome, and VLC Media Player. Gain insights into the history of ASLR, system attack trends, and potential countermeasures against these vulnerabilities.