25.03.2017 Views

LPE vulnerabilities exploitation on Windows 10 Anniversary Update

eJwXM6v

eJwXM6v

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>Windows</strong> <strong>10</strong> KASLR Improvements<br />

• <strong>Windows</strong> <strong>10</strong> <strong>Anniversary</strong> update c<strong>on</strong>tains many new exploit<br />

mitigati<strong>on</strong>s.<br />

• <strong>Windows</strong> Kernel KASLR <strong>Update</strong>s for <strong>10</strong> x64 <strong>on</strong>ly.<br />

• We’ll focus <strong>on</strong> KASLR Improvements.<br />

• We will describe bypass of GDI objects addresses mitigati<strong>on</strong><br />

(PEB.GDISharedHandleTable doesn’t disclose GDI objects addresses<br />

after update).

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!