Remedial Heap Overflows: Dlmalloc Style
Atlas details atlas: Remedial Heap Overflows: dlmalloc style Sometimes even the top dudes need a refresher course.
Summary
Architecture and Background
Atlas: Remedial Heap Overflows: dlmalloc style Sometimes even the top dudes need a refresher course. Remedial Heap Overflows is not so much a lesson to the lame, but a refresher for the leet.
Vulnerability Analysis
One day the speaker was approached (in a subway, of course) by a top-notch dude (who has his own posse) and asked how they work. Clearly not even the best of the best always know everything.
Exploitation and Demonstrations
atlas, a disciple of the illustrious Skodo, has a history in programming, systems support, telecom, security, and reverse engineering. His introduction to the hard-core hacking world was through dc13's CTF Qualifiers.
Remediation and Defensive Strategies
atlas won the individual contest in 2005 and lead the winning team "1@stplace" in 2006. atlas has written the WEP-cracking tool bssid-flatten, the @Utility-Belt (toolkit for hacking and exploitation), and his favorite tool, disass.
Related talks
Main Stage·43 min
Daniel Selifonov
Daniel Selifonov explores advanced memory corruption exploitation primitives, demonstrating deterministic heap layout manipulation and mitigation bypasses.
Main Stage·53 min
Halvar Flake
Halvar Flake details halvar Flake: RE 2006: New Challenges Need Changing Tools Abstract: Reverse Engineering has come a long way.
Main Stage·46 min
Jared DeMott
Jared DeMott explores the evolving art of fuzzing at DEF CON 14, examining penetration-testing and practical defenses.