Me Code Pretty One Day: .NET Bug Hunting and Exploitation

No ratings

Presented at CounterMeasure 2014 by

Kelly Lum

Java isn't the only managed language with bugs. This talk will cover the current state of .NET reverse engineering and exploitation, including practical examples of both application-level and framework vulnerabilities. We'll cover the various strengths and weaknesses of .NET security features, including bypassing strong-name signing including the GAC. Finally, I will provide a short demo on how to modify the behavior of the .NET framework through DLL byte patching.