practical windows xp2003 heap exploitation

Upload: magnologan

Post on 08-Apr-2018

230 views

Category:

Documents


0 download

TRANSCRIPT

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    1/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    2/84

    mailto:[email protected]:[email protected]
  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    3/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    4/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    5/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    6/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    7/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    8/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    9/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    10/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    11/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    12/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    13/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    14/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    15/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    16/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    17/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    18/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    19/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    20/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    21/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    22/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    23/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    24/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    25/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    26/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    27/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    28/84

    http://msdn.microsoft.com/en-us/library/aa366705(VS.85).aspxhttp://msdn.microsoft.com/en-us/library/aa366705(VS.85).aspx
  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    29/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    30/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    31/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    32/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    33/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    34/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    35/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    36/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    37/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    38/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    39/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    40/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    41/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    42/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    43/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    44/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    45/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    46/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    47/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    48/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    49/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    50/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    51/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    52/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    53/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    54/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    55/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    56/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    57/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    58/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    59/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    60/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    61/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    62/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    63/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    64/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    65/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    66/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    67/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    68/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    69/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    70/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    71/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    72/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    73/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    74/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    75/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    76/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    77/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    78/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    79/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    80/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    81/84

  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    82/84

    http://rjohnson.uninformed.org/Presentations/200703%20EuSecWest%20-%20Windows%20Vista%20Exploitation%20Countermeasures/rjohnson%20-%20Windows%20Vista%20Exploitation%20Countermeasures.ppthttp://rjohnson.uninformed.org/Presentations/200703%20EuSecWest%20-%20Windows%20Vista%20Exploitation%20Countermeasures/rjohnson%20-%20Windows%20Vista%20Exploitation%20Countermeasures.ppthttp://rjohnson.uninformed.org/Presentations/200703%20EuSecWest%20-%20Windows%20Vista%20Exploitation%20Countermeasures/rjohnson%20-%20Windows%20Vista%20Exploitation%20Countermeasures.ppthttp://debugger.immunityinc.com/update/Documentation/ref/Libs.libheap-pysrc.htmlhttp://debugger.immunityinc.com/update/Documentation/ref/Libs.libheap-pysrc.htmlhttp://advancedwindowsdebugging.com/ch06.pdfhttp://www.lateralsecurity.com/downloads/hawkes_ruxcon-nov-2008.pdfhttp://www.blackhat.com/presentations/win-usa-02/halvarflake-winsec02.ppthttp://www.securityfocus.com/infocus/1846http://www.symantec.com/connect/blogs/double-free-vulnerabilities-part-1http://www.cybertech.net/~sh0ksh0k/projects/winheap/XPSP2%20Heap%20Exploitation.ppthttp://www.cybertech.net/~sh0ksh0k/projects/winheap/XPSP2%20Heap%20Exploitation.ppthttp://xcon.xfocus.org/XCon2004/archives/14_Reliable%20Windows%20Heap%20Exploits_BY_SHOK.pdfhttp://xcon.xfocus.org/XCon2004/archives/14_Reliable%20Windows%20Heap%20Exploits_BY_SHOK.pdfhttp://www.cybertech.net/~sh0ksh0k/projects/winheap/CSW04%20-%20Reliable%20Heap%20Exploitation.ppthttp://www.cybertech.net/~sh0ksh0k/projects/winheap/CSW04%20-%20Reliable%20Heap%20Exploitation.ppthttp://www.maxpatrol.com/defeating-xpsp2-heap-protection.pdf
  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    83/84

    http://www.immunitysec.com/downloads/ApologyofOdays.pdfhttp://www.immunityinc.com/downloads/Heap_Singapore_Jun_2007.pdfhttp://www.blackhat.com/presentations/bh-europe-07/Sotirov/Presentation/bh-eu-07-sotirov-apr19.pdfhttp://www.blackhat.com/presentations/bh-europe-07/Sotirov/Presentation/bh-eu-07-sotirov-apr19.pdfhttp://www.insomniasec.com/publications/Heaps_About_Heaps.ppthttp://www.insomniasec.com/publications/Exploiting_Freelist%5B0%5D_On_XPSP2.ziphttp://www.insomniasec.com/publications/Exploiting_Freelist%5B0%5D_On_XPSP2.ziphttp://msdn.microsoft.com/en-us/library/aa366916(VS.85).aspxhttp://www.blackhat.com/presentations/win-usa-04/bh-win-04-litchfield/bh-win-04-litchfield.ppthttp://www.blackhat.com/presentations/win-usa-04/bh-win-04-litchfield/bh-win-04-litchfield.ppt
  • 8/7/2019 Practical Windows XP2003 Heap Exploitation

    84/84