Some Things That Every Vulnerability Developer Should Know

No ratings

Presented at t2 2010 by

This session will discuss a number of techniques that, while public, have not received the attention they deserve from the vulnerability-development community. The talk will focus on two aspects primarily: Leveraging visualization (as demonstrated in Gera's HeapDraw) to understand heap layout better, and using RTTI information to generate full UML-style class hierarchies from binaries. Finally, comments on how these things can be combined profitably will be provided.