01.02.2014 Views

SBDA “same bug, different app” - Security Assessment

SBDA “same bug, different app” - Security Assessment

SBDA “same bug, different app” - Security Assessment

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Non <strong>SBDA</strong> Vectors<br />

• These Are The Interesting Ones<br />

Some apply only against a specific target<br />

Others are new vectors that may become <strong>SBDA</strong> vectors<br />

• Often Overlooked<br />

Because they don’t fit the normal pattern<br />

• Examples<br />

DNS server long response<br />

Corrupt cookie value, Long basic credentials<br />

DeviceIoControl, Shatter attacks, Events, Shared sections<br />

VDM, Expand-down data segments<br />

• Thinking Outside The Square<br />

Often the result of new research<br />

Going where nobody has gone before<br />

Copyright <strong>Security</strong>-<strong>Assessment</strong>.com 2005

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!