Главная
Study mode:
on
You
History
Saved
In progress 0 courses
compleat 0 courses
#Art & Design #Adobe #ChatGPT #GitHub

#Return-oriented Programming

Showing: 25 courses
IEEE

Return to the Zombie Gadgets - Undermining Destructive Code Reads via Code-Inference Attacks

0 rewiews
Explores techniques to bypass destructive code reads, a defensive strategy against code reuse attacks, through constructive reloads and code association via implicit reads, demonstrating vulnerabilities in this security approach.
Add to list
12 Lesons
21 minutes
On-Demand
Free-Video
IEEE

Evaluation of the Executional Power in Windows Using Return Oriented Programming

0 rewiews
Explore Windows vulnerabilities through Return Oriented Programming, evaluating execution power and discussing implications for system security in this IEEE workshop presentation.
Add to list
5 Lesons
23 minutes
On-Demand
Free-Video
Linux Foundation

Hardware Protections Against ROP Attacks

0 rewiews
Explore hardware-based defenses against Return-Oriented Programming (ROP) attacks with IBM expert Mike Rapoport, focusing on cutting-edge security measures for system protection.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
ACM SIGPLAN

Thread-Level Attack-Surface Reduction for Enhanced Security

0 rewiews
Explore thread-level attack-surface reduction, a dynamic approach to eliminate unused code on a thread level, significantly reducing ROP gadgets and enhancing security in multi-threaded applications.
Add to list
1 Lesons
22 minutes
On-Demand
Free-Video
IEEE

Spectre Attacks Exploiting Speculative Execution

0 rewiews
Explore speculative execution vulnerabilities in modern processors, their impact on system security, and potential countermeasures to protect against Spectre attacks.
Add to list
11 Lesons
21 minutes
On-Demand
Free-Video
BSidesLV

ROP with a 2nd Stack, or This Exploit is a Recursive Fibonacci Sequence Generator

0 rewiews
Explore advanced ROP techniques using a second stack, delving into recursive Fibonacci sequence generation as an exploit method. Gain insights into innovative cybersecurity approaches.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
Ekoparty Security Conference

How to Cook Cisco: Exploit Development for Cisco IOS - George Nosenko - Ekoparty Security Conference - 2017

0 rewiews
Exploración técnica de vulnerabilidades en Cisco IOS, incluyendo bypass de DEP, ROPing, shellcode en etapas y evasión de mecanismos de integridad. Incluye demostraciones prácticas y código fuente.
Add to list
36 Lesons
45 minutes
On-Demand
Free-Video
USENIX

ROP is Still Dangerous - Breaking Modern Defenses

0 rewiews
Explores advanced Return Oriented Programming attacks, demonstrating vulnerabilities in modern defense mechanisms and proposing strategies to overcome security measures like kBouncer and ROPecker.
Add to list
14 Lesons
17 minutes
On-Demand
Free-Video
Black Hat

Enter Sandbox

0 rewiews
Explore automated seccomp filter generation for Linux applications, enhancing security through sandboxing and system call restrictions without manual developer intervention.
Add to list
21 Lesons
35 minutes
On-Demand
Free-Video
Black Hat

Uncommon Sense - Detecting Exploits with Novel Hardware Performance Counters and ML Magic

0 rewiews
Explore novel hardware performance counters and machine learning techniques to detect advanced exploits like speculative execution, Rowhammer, and ROP, enhancing cybersecurity defenses against evolving threats.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
Black Hat

Return to Where? You Can't Exploit What You Can't Find

0 rewiews
Explore advanced techniques for detecting and preventing memory corruption vulnerabilities, including execute-only memory and code pointer hiding, to enhance software security against sophisticated exploitation methods.
Add to list
26 Lesons
39 minutes
On-Demand
Free-Video
Black Hat

ROPInjector - Using Return Oriented Programming for Polymorphism and Antivirus Evasion

0 rewiews
Explore advanced polymorphism techniques using Return Oriented Programming for antivirus evasion, with practical demonstrations of the ROPInjector tool and its effectiveness against detection methods.
Add to list
23 Lesons
23 minutes
On-Demand
Free-Video
IEEE

Hardware-Enforcement of Walther-Recursive Program Functions

0 rewiews
Explore hardware-enforced restrictions on computational complexity using JIT compilation and Intel's Processor Tracing to improve security through limited return-oriented programming.
Add to list
1 Lesons
15 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Software Security Era - Past, Present, and Future

0 rewiews
Explore the evolution of memory corruption exploitation, from early techniques to modern mitigations. Includes live demos of vulnerabilities and discusses the ongoing challenges in software security.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Automatic Generation of ROP Chains

0 rewiews
Introduces EasyROP, a tool for automating ROP attacks by finding gadgets in binary files. Analyzes Windows libraries for attack feasibility and demonstrates a real-world application on CVE-2010-3333.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Exploiting a Limited UAF on Ubuntu 22.04 to Achieve LPE

0 rewiews
Detailed exploration of exploiting a Linux kernel vulnerability in Ubuntu 22.04 to achieve local privilege escalation, focusing on advanced exploitation techniques and bypass methods.
Add to list
1 Lesons
57 minutes
On-Demand
Free-Video

Jumping the Fence - Comparison and Improvements for Existing Jump Oriented Programming Tools

0 rewiews
Explore Jump Oriented Programming, comparing tools and discussing improvements. Covers gadget search, comprehension strategies, and architecture support for various platforms including ARM and AVR.
Add to list
29 Lesons
34 minutes
On-Demand
Free-Video
Black Hat

The Beast is in Your Memory

0 rewiews
Explore advanced exploitation techniques and control-flow integrity mechanisms. Learn about Return-Oriented Programming, its countermeasures, and how to bypass emerging CFI solutions.
Add to list
26 Lesons
55 minutes
On-Demand
Free-Video
Black Hat

OptiROP - Hunting for ROP Gadgets in Style

0 rewiews
Discover efficient ROP gadget hunting with OptiROP, a tool using semantic queries for quick, precise results across executable formats on x86/x64 architectures. Simplify shellcode development.
Add to list
1 Lesons
1 hour 7 minutes
On-Demand
Free-Video
NDC Conferences

Return Oriented Programming, an Introduction

0 rewiews
Learn the mechanics of Return Oriented Programming, an exploitation technique. Explore examples demonstrating code execution in contexts with non-executable stacks.
Add to list
1 Lesons
57 minutes
On-Demand
Free-Video

Jumping the Fence - Comparison and Improvements for Existing Jump Oriented Programming Tools

0 rewiews
Exploring Jump Oriented Programming tools, comparing techniques, and discussing improvements. Covers dispatcher gadgets, functional gadgets, and AVR support with demos and practical insights.
Add to list
18 Lesons
33 minutes
On-Demand
Free-Video
DEFCONConference

Process Injection Attacks with Return-Oriented Programming - Advanced Techniques and Methodologies

0 rewiews
Discover advanced process injection techniques using return-oriented programming (ROP), including unique string comparison solutions, multiple WinAPI patterns, and practical methodologies for reliable implementation.
Add to list
1 Lesons
23 minutes
On-Demand
Free-Video
NDC Conferences

Return Oriented Programming, an Introduction

0 rewiews
Explore Return Oriented Programming (ROP) exploitation technique, its mechanics, and practical examples for executing code in non-executable stack contexts.
Add to list
1 Lesons
57 minutes
On-Demand
Free-Video
x33fcon

Demystifying Thread Call Stack Spoofing - Advanced Techniques for Stack Manipulation

0 rewiews
Dive into advanced thread stack spoofing techniques, combining stack frames forging with ROP and JOP to achieve stealthy module execution and call stack manipulation.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
DEFCONConference

Advanced ROP Framework - Pushing Return-Oriented Programming to Its Limits

0 rewiews
Discover advanced return-oriented programming techniques with ROP ROCKET framework, featuring syscall bypassing, cross-architecture exploitation, and innovative bad byte handling for enhanced security testing.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video