nagy-kernel - ruxcon 2012

More documents

Recommendations

Info

USER runs the GUI • Windows, Menus, Cursors, Icons… © Sven Micklish
Userland gdi32 “NT Executive” IO USER GDI Unladen Swallows Meaning of Life Hardware
Page 1 and 2: Windows Kernel Fuzzing for Beginner
Page 3 and 4: Secret Fuzzing Wisdoms • Select a
Page 5 and 6: Target Selection n_bugs = p_bug * n
Page 7 and 8: Target Selection n_bugs = p_bug * n
Page 9 and 10: Windows Kernel, Simplified • Feat
Page 11 and 12: Userland kernel32 ntdll 1. Setup sy
Page 13 and 14: Userland kernel32 ntdll “NT Execu
Page 15: Userland user32 “NT Executive”
Page 19: Userland user32 / gdi32 “NT Execu
Page 22 and 23: Userland kernel32 ntdll / user32 /
Page 24 and 25: Attack Vector Evaluation • Coming
Page 26 and 27: Attack Vector Evaluation • GDI is
Page 28 and 29: GDI - Delivery Vectors • Here’s
Page 30 and 31: GDI - Fonts 1. Load the fuzzed font
Page 32 and 33: GDI - Window Basics • Lots of peo
Page 34 and 35: GDI - Window Basics 4. Create a Win
Page 36 and 37: 6. “Create” the Font GDI - Font
Page 38 and 39: GDI - Fonts 8. How big is a ‘line
Page 40 and 41: ETO_GLYPH_INDEX “ The lpString ar
Page 42 and 43: Image: pavel-petel.tumblr.com - NSF
Page 44 and 45: GDI - Cursors @old_clip = GDI::RECT
Page 46 and 47: Metafiles! • Like a ‘script’
Page 48 and 49: Cannot the Scaling! What do 1. Play
Page 50 and 51: Image: pavel-petel.tumblr.com - NSF
Page 53: GDI - JPEG / PNG To ensure proper m
Page 56 and 57: Fine. Let’s be a Printer. 2. ( Op
Page 58 and 59: 4. Do the Thing printer_dc=GDI.Crea
Page 60 and 61: One More Thing… # first 4 args ar
Page 62 and 63: 1 Line Syscall Fuzzer! Syscall.call
Page 64 and 65: kthxbai • As I mentioned, 5 weeks

nagy-kernel - ruxcon 2012

Create successful ePaper yourself

Delete template?

Save as template?