Writing your first windows exploit in less than one hour - Workshop

No ratings

Presented at BSidesVienna 2015 by

Klaus Gebeshuber

Starting with some basics about stack layout, function calling, buffer overflows, overwriting return addresses and finding such vulnerabilities in software products we will explore some hands on examples - doing a straight forward exploit development with disabled mitigation mechanisms of modern operating systems. Trigger a buffer overflow using fuzzing techniques, working with an attached debugger, analyze registers after a crash, find the right offset to overwrite registers, create a shell code, find a way to jump to the shell code, encode the shell code and execute it. Now, you will have your first working windows exploit in your pocket. At the end of the workshop, there is room for discussions. We will talk about exploit mitigation techniques like ASLR, DEP, SafeSEH, SEHOP, Stack canaries and some bypassing methods using advanced exploitation techniques.