Search results with tag "Windows kernel"

Countering Kernel Malware in Virtual Execution Environments

smartech.gatech.edu

Countering Kernel Malware in Virtual Execution Environments A Thesis ... of Philosophy in the School of Electrical and Computer Engineering Georgia Institute of Technology December 2009 . ii Countering Kernel Malware in Virtual Execution Environments ... dynamically monitors and analyzes the behavior of Windows kernel malware. Kernel malware ...

Virtual, Execution, Windows, Environment, Malware, Kernel, Countering, Windows kernel, Countering kernel malware in virtual execution environments

Exploiting Hardcore Pool Corruptions in Microsoft Windows ...

www.nosuchcon.org

Exploiting Hardcore Pool Corruptions in Microsoft Windows Kernel Nikita Tarakanov Anonymous Developer Paris, NoSuchCon 2013 ... •Attacking kernel from the sandbox is convenient •Untrusted -> r0 -> full compromise RULEZZZ (Nils (@nils) ... we will be pwning Windows Kernel Pool Corruptions . Q&A •Correct question – answer ...

Loops, Microsoft, Windows, Corruption, Kernel, Exploiting, Attacking, Exploiting hardcore pool corruptions in, Hardcore, Exploiting hardcore pool corruptions in microsoft windows kernel, Attacking kernel, Windows kernel

Demystifying Debugging and Disassembling Applications

published-prd.lanyonevents.com

Demystifying Debugging and Disassembling Applications. HTA-T10R. Global Head of Security Research. Sophos & SANS @JamesLyne. ... The Windows Kernel. 25. The modern Windows Kernel is very complex, requires ... Attacking the Kernel. 28. #RSAC.

Applications, Windows, Demystifying, Kernel, Debugging, Attacking, The windows kernel, Windows kernel, Demystifying debugging and disassembling applications, Disassembling

Bochspwn Reloaded: Detecting Kernel Memory Disclosure …

www.recon.cx

•One real-life example is a Windows kernel exploit found in the HackingTeam dump in July 2015 (CVE-2015-2433, MS15-080). •Pool memory disclosure leaking base address of win32k.sys.

Memory, Windows, Disclosures, Detecting, Kernel, Reloaded, Windows kernel, Bochspwn reloaded, Bochspwn, Detecting kernel memory disclosure

Win32k Dark Composition - cansecwest.com

cansecwest.com

Win32k Dark Composition Attacking the Shadow Part of Graphic Subsystem @360Vulcan Team Peng Qiu (@pgboy) SheFang Zhong (@zhong_sf) About US Member of 360 vulcan team. Windows kernel security researcher Pwn2Own winners 2016 .pwned Chrome pwn2own 2016 .pwned Flash pwn2own 2016 Pwnfest winners 2016 .pwned Edge PwnFest 2016

Windows, Compositions, Kernel, Dark, Attacking, Windows kernel, Win32k dark composition, Win32k, Win32k dark composition attacking

KERNEL WARS: KERNEL-EXPLOITATION DEMYSTIFIED

defcon.org

KERNEL WARS: KERNEL-EXPLOITATION DEMYSTIFIED. Introduction to kernel-mode ... – No previous Windows kernel debugging experience – Two main options: SoftICE / WinDBG ... quite slim it would be portable across both Windows 2000 and XP – Attacking the kernel directly would bypass any hardening measures

Windows, Kernel, Exploitation, Attacking, Windows kernel