No Hat 2021 - E. Shimony & M. Cherp
My Fuzzy Driver analyzes No Hat 2021 - E. Shimony & M. Cherp.
Summary
Automated vulnerability discovery in closed-source Windows kernel drivers using fuzzing. Uses the kAFL fuzzer with Intel Processor Trace and driver-specific grammar-based fuzzing, targeting the many kernel drivers accessible from userland on Windows. Walks through target selection, weakest-link assessment, tool customization, and vulnerability remediation.
Related talks
BITM Hacklab·3 min
Wrap Up
Security researchers investigate No Hat 2024 and analyze defensive countermeasures.
vulnerability-researchthreat-detectiondefensive-security
BITM Hacklab·3 min
Wrap Up
Security researchers investigate No Hat 2023 and analyze defensive countermeasures.
vulnerability-researchthreat-detectiondefensive-security
BITM Hacklab·5 min
Closing explores No Hat 2021 - Marco Balduzzi.
marcobalduzzivulnerability-research