Главная
Study mode:
on
1
Introduction
2
CTF & Wargames
3
The Past
4
Example: Dynamic Analysis
5
Some Background
6
Automating Exploitation
7
AEG - pwnable.kr
8
Example: DBI
9
Example: Symbolic Execution
10
Example: Concolic Execution
11
Creating a Feedback Loop
12
Dynamic Binary Instrumentation
13
Example: Flare-on Challenge 9
14
AEG Demo: Assumptions
15
LLVM Pass
16
Angr Script
17
Conclusion: The Future
18
Finding (More) Bugs
19
Acknowledgements
20
References
21
Any Questions?
Description:
Explore practical applications of program analysis in this conference talk from NorthSec. Delve into instrumentation, symbolic execution, and concolic execution techniques, both in theory and practice. Learn how to automatically generate exploits against complex, stand-alone applications by traversing program control flow, collecting path constraints, and solving for desired executions. Discover methods for targeting generalized behavior in programs and identifying known vulnerability characteristics. Watch a live demonstration solving an obfuscated 'crackme' challenge using the discussed techniques. Gain insights into CTF challenges, dynamic analysis, automating exploitation, and creating feedback loops. Examine real-world examples, including pwnable.kr and Flare-on Challenge 9. Understand the potential future applications of program analysis in finding more bugs and enhancing cybersecurity practices.

Practical Uses of Program Analysis - Automatic Exploit Generation

NorthSec
Add to list