You can’t touch this: Secure Enclaves for Offensive Operations

No ratings

Presented at Insomnihack 2025 by

Cedric Bockhaven

Matteo Malvica

Virtualization-Based Security (VBS) enclaves provide isolated environments for handling sensitive data. In this talk we will discuss the architecture of VBS enclaves, demonstrate how to create your own enclave, and explore practical exploitation techniques for existing vulnerable enclave DLLs. We will turn a read-write primitive into code execution within the enclave, show how to securely seal a beacon in an enclave during sleep and make it untouchable.