YoVDO

Injection on Steroids - Code Less Code Injections and 0 Day Techniques

Offered By: YouTube

Tags

Conference Talks Courses Cybersecurity Courses

Course Description

Overview

Explore advanced code injection techniques and zero-day vulnerabilities in this BSidesLV 2015 conference talk. Delve into classic code injection methods before examining PowerLoader's innovative approaches, including abusing shared sections and ROP techniques. Learn about desktop heap exploitation and strategies for 64-bit systems. Investigate kernel-to-user code injections, covering common methods like User APC, entry point patching, and import table patching. Discover the intricacies of Trap Frame injection and KTRAP_FRAME. Conclude with an in-depth look at codeless code injection, addressing challenges and demonstrating practical applications through API examples.

Syllabus

Intro
Classic Code Injection Methods
PowerLoader - Abusing Shared Sections
Powerloader - ROP n' Roll
PowerLoader - Quick Summary
Ul Shared Memory - Reminder
PowerLoaderEx - Desktop Heap as Shared Section
PowerLoaderEx64 - What About 64-bit?
PowerLoaderEx64 - Strategy
PowerLoaderEx64 - User32 Calbacks To Rescue
Introduction - Kernel-To-User Code Injections
Common Injection Methods - User APC
Common Injection Methods - Entry Point Patching
Common Injection Methods -- Import Table Patching
Common Injection Methods - Quick Summary
Introducing Trap Frame injection
KTRAP_FRAME
The Trivial Injection
Codeless Code Injection - Challenges
Codeless Code Injection - NtClose as a callback
Codeless Code Injection - Creating dedicated thread
Codeless Code Injection - Creating a Dedicated Thread
Codeless Code Injection - API Example


Related Courses

Computer Security
Stanford University via Coursera
Cryptography II
Stanford University via Coursera
Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera
Building an Information Risk Management Toolkit
University of Washington via Coursera
Introduction to Cybersecurity
National Cybersecurity Institute at Excelsior College via Canvas Network