How to Survive the Hardware Assisted Control-Flow Integrity Enforcement
Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only! Grab it Dive deep into Intel Control-flow Enforcement Technology (CET) and its implementation on Windows 10 x64 operating systems in this comprehensive Black Hat conference talk. Explore software-based control-flow integrity enforcement techniques like Microsoft Control Flow Guard (CFG) and Return Flow Guard (RFG). Examine the principles of Intel CET's shadow stack and Indirect Branch Tracking (IBT). Investigate CET implementation on Windows 10, including shadow stack setup and switching. Discover potential methods for achieving control-flow hijacking when CET is enabled, with demonstrations of discussed attacks. Analyze vulnerable code in various scenarios, such as unwind handler hijacking, frame consolidation unwind callback routine hijacking, and thread context hijacking in exception unwind processes. Gain valuable insights into hardware-assisted control-flow integrity enforcement and learn strategies to navigate its challenges.