67

2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Download PDF Report

Upload
danielbilar
View
856
Download
0

Embed Size (px)

Citation preview

Page 1: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 2: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 3: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

�

Page 4: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 5: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 6: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 7: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

�

Page 8: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

�

�

�

��

Page 9: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

Page 10: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 11: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

��

�

Page 12: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 13: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 14: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

� →� →� →�

��

Page 15: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

��

�

��

�

�

Page 16: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

��

� ⇐⇒� ⇐⇒

Page 17: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 18: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

�

� →� →

�� →� →

�� ⇐⇒

Page 19: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

� ��

��

Page 20: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 21: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 22: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

⇐⇒

⇐⇒

Page 23: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

��

Page 24: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 25: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 26: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

Page 27: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

�

�

�

�

��

��

�

Page 28: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 29: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

��

Page 30: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

→�

Page 31: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

��

�

Page 32: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 33: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

� ⇒

� ⇒

� ⇒

��

�

Page 34: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 35: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 36: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

��

�

�

∃ ∀

Page 37: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 38: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 39: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

��

Page 40: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

��

Page 41: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

��

��

Page 42: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

��

�

Page 43: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

� →� →�

→

�

�

Page 44: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

��

� →

�

Page 45: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 46: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

� →�

� →

Page 47: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

� →�

� →�

� →

�

� →�

� →�

� →

Page 48: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 49: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 50: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

�→

� →� →

�

� →�

→

Page 51: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

→

�

→� →

� →

Page 52: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

� → →� → →

Page 53: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

→

→

Page 54: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

→�

→

Page 55: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

��

� →

��

� →

�

� →

Page 56: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

Page 57: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

� →� →

� →

Page 58: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

�

�

Page 59: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 60: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

��

�

�

Page 61: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 62: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 63: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

�

Page 64: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

��

�

Page 65: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

� ��

��

Page 66: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

Page 67: 2013 syscan360 nguyen_optirop hunting for rop gadgets in style

China Gadgets - 3 Tips for Buying China Gadgets

China Gadgets - 3 Tips for Buying China Gadgets

Technology

[Syscan360 2013] Brossard Jonathan

[Syscan360 2013] Brossard Jonathan

Technology

OptiROP: Hunting for ROP gadgets in style - SyScan360 · OptiROP: Hunting for ROP gadgets in style ... Syscan 360, September 2014 1/67 NGUYEN Anh Quynh,

OptiROP: Hunting for ROP gadgets in style - SyScan360 · OptiROP: Hunting for ROP gadgets in style ... Syscan 360, September 2014 1/67 NGUYEN Anh Quynh,

Documents

Attacking Next- Generation Firewalls · 2019. 9. 3. · ¬ ROP needed! ¬ MIPS64 Rop: − Aligned 4byte instructions è No accidental gadgets ¬ Only object at constant address is

Attacking Next- Generation Firewalls · 2019. 9. 3. · ¬ ROP needed! ¬ MIPS64 Rop: − Aligned 4byte instructions è No accidental gadgets ¬ Only object at constant address is

Documents

Gadgets - archive.lib.msu.edu

Gadgets - archive.lib.msu.edu

Documents

ROVIN_Latest Gadgets

ROVIN_Latest Gadgets

Business

Greener Gadgets

Greener Gadgets

Design

Unfixable Gadgets

Unfixable Gadgets

Technology

Gadgets news,new tech gadgets,gadgets online,best buy gadget

Gadgets news,new tech gadgets,gadgets online,best buy gadget

Documents

Documents

Documents

Documents

ARM Exploitation ROPmap - Black Hat Briefingsmedia.blackhat.com/.../Le/BH_US_11_Le_ARM_Exploitation_ROPmap… · • Direct mapping ROP instructions to ASM gadgets • LHS/RHS type

ARM Exploitation ROPmap - Black Hat Briefingsmedia.blackhat.com/.../Le/BH_US_11_Le_ARM_Exploitation_ROPmap… · • Direct mapping ROP instructions to ASM gadgets • LHS/RHS type

Documents

Documents

OptiROP: Hunting for ROP gadgets in style · PDF fileAllow semantic query: describing high level desired action of needed ... COSEINC OptiROP: Hunting for ROP gadgets in

OptiROP: Hunting for ROP gadgets in style · PDF fileAllow semantic query: describing high level desired action of needed ... COSEINC OptiROP: Hunting for ROP gadgets in

Documents

Business

26.05 - Honeynet Project · 26.05.2014 1 Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. 1 FROM FOG COMPUTING TO ROP GADGETS FELIX LEDER Felix.leder@bluecoat.com

26.05 - Honeynet Project · 26.05.2014 1 Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. 1 FROM FOG COMPUTING TO ROP GADGETS FELIX LEDER [email protected]

Documents

ROP Illmatic: Exploring Universal ROP on glibc x86-64 (en)

ROP Illmatic: Exploring Universal ROP on glibc x86-64 (en)

Technology

HideM: Protecting the Contents of Userspace Memory in the ...HideM ensures memory dis-closure vulnerabilities cannot be used to nd ROP gadgets to enable reliable exploitation, discover

HideM: Protecting the Contents of Userspace Memory in the ...HideM ensures memory dis-closure vulnerabilities cannot be used to nd ROP gadgets to enable reliable exploitation, discover

Documents

Generic Job Profiles...ROP 7 Cashier’s Supervisor ROP 8 Marketing Manager ROP 9 Trade Marketing Manager ROP 10 Product/Brand Manager

Documents

$SyScan360 - Stefan Esser - OS X El Capitan sinking the S\H/IP$

SyScan360 - Stefan Esser - OS X El Capitan sinking the S\H/IP

Internet

Education

Gadgets, Gadgets, Gadgets! Barbara Fullerton, Manager, Librarian Relations, 10-K Wizard Sabrina Pacifici, Editor & Publisher, LLRX.com & beSpacific.com

Gadgets, Gadgets, Gadgets! Barbara Fullerton, Manager, Librarian Relations, 10-K Wizard Sabrina Pacifici, Editor & Publisher, LLRX.com & beSpacific.com

Documents

Cloning your Gadgets: Complete ROP Attack Immunity with ...€¦ · 1545-5971 (c) 2015 IEEE. Personal use is permitted, but republication/redistribution requires IEEE permission

Cloning your Gadgets: Complete ROP Attack Immunity with ...€¦ · 1545-5971 (c) 2015 IEEE. Personal use is permitted, but republication/redistribution requires IEEE permission

Documents

2013 syscan360 wang yu_ntvdm

2013 syscan360 wang yu_ntvdm

Technology

I rop interesting rop gadgets-v1.0

I rop interesting rop gadgets-v1.0

Software

ROP and Fuzzinggoldbe/teaching/HW55813/rop.pdf · Even more gadgets ¾Gadgets can be pieced together from other parts of the program: • String literals: – “hello world” has

ROP and Fuzzinggoldbe/teaching/HW55813/rop.pdf · Even more gadgets ¾Gadgets can be pieced together from other parts of the program: • String literals: – “hello world” has

Documents

LoRa the Explorer - 2017 SyScan360 | SyScan360 …€¦ · · 2017-05-26LoRa the Explorer 1.What is LoRa ... If one node is compromised then all traffic can be read and spoofed

LoRa the Explorer - 2017 SyScan360 | SyScan360 …€¦ · · 2017-05-26LoRa the Explorer 1.What is LoRa ... If one node is compromised then all traffic can be read and spoofed

Documents

New ROPecker( AGeneric(and(Prac/cal(Approach( … · 2019. 1. 22. · • ROP(aack(is(acodeIreuse(aack(– No(injected(malicious(code(• To(launch(an(ROP(aack(– IdenNfy(intended(gadgets(•

New ROPecker( AGeneric(and(Prac/cal(Approach( … · 2019. 1. 22. · • ROP(aack(is(acodeIreuse(aack(– No(injected(malicious(code(• To(launch(an(ROP(aack(– IdenNfy(intended(gadgets(•

Documents

Documents