Auditing Binaries for Security Vulnerabilities

Auditing Binaries for Security Vulnerabilities

Explore advanced techniques for auditing closed-source software and identifying security vulnerabilities in Windows binaries in this comprehensive Black Hat conference talk. Delve into legal considerations, stress testing methodologies, manual audit approaches, and strategies for detecting suspicious constructs. Gain insights into essential auditor skills and tools, refresh C/C++ code auditing knowledge, and learn to navigate disassembly for effective vulnerability detection. Examine a real-world example using iWS 4.1 SHTML, and discover advanced automation topics to enhance your binary auditing capabilities.