BH_US_12_Tsai_Pan_Exploiting_Windows8_WP
BH_US_12_Tsai_Pan_Exploiting_Windows8_WP
BH_US_12_Tsai_Pan_Exploiting_Windows8_WP
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
You must know API before fuzzing it. The metro style app API can be categorized in UI, Device,<br />
Media, Communication & data and Fundamentals.<br />
As for the testing to WinRT, we can apply the same methods with other application fuzzing,<br />
such as IE : append some abnormal arguments or tags to all methods, and see if something was<br />
going wrong. All we have to do is iterating all mutations and combinations through each API.<br />
5.2 A Broker Process Memory Corruption<br />
During the testing, we discovered a memory corruption problem in a broker process –<br />
OpenWith.exe. And we found this is possible exploitable:<br />
22
Change language