Kernel Exploitation Via Uninitialized Stack
Kees Cook - Kernel Exploitation Via Uninitialized Stack Extra material here: Leveraging uninitialized stack memory into a full-blown root escalation is easier than it sounds.
Summary
Architecture and Background
Kees Cook - Kernel Exploitation Via Uninitialized Stack Extra material here: Leveraging uninitialized stack memory into a full-blown root escalation is easier than it sounds.
Vulnerability Analysis
See how to find these vulnerabilities, avoid the pitfalls of priming the stack, and turn your "memory corruption" into full root privileges.
Exploitation and Demonstrations
Kees Cook is part of the Ubuntu Security Team, where he tries to harden Ubuntu in particular, and Linux in general, against attack.
Remediation and Defensive Strategies
In addition to being an Ubuntu developer, he's a member of the Ubuntu Technical Board, a Debian Developer, and a Kernel.org admin. As a long-time DEF CON Capture the Flag participant, he's especially proud of being part of Team 1@stPlace and winning in 2006 and 2007. Twitter: @kees_cook
Related talks
Main Stage·13 min
Alexander Minozhenko
Alexander Minozhenko explores how to hack vmware vcenter server in 60 seconds at DEF CON 20, examining penetration-testing and practical defenses.
Main Stage·1 hr 5 min
Dan Kaminsky
Dan Kaminsky details black Ops Dan Kaminsky Chief Scientist, DKH If there's one thing we know, it's that we're doing it wrong.
Main Stage·41 min
Dustin Hoffman · Semon Rezchikov
Dustin Hoffman and Semon Rezchikov details busting the BARR: Tracking "Untrackable" Private Aircraft for Fun &Profit Dustin Hoffman President & Senior Engineer, Exigent Systems Inc.