The Linux Evasion Stack: Breaking All 3 EDR Pillars With io_uring & ELF Packing
Massimo Bertocchi details The Linux Evasion Stack: Breaking All 3 EDR Pillars With io_uring & ELF Packing.
Summary
Demonstrates breaking EDR pillars using io_uring and ELF packing on Linux.
Related talks
Main Stage·39 min
Rex Guo · Junyuan Zeng
Rex Guo and Junyuan Zeng present the Phantom Attack, exploiting implementation flaws in Linux system call tracing frameworks to completely blind endpoint monitoring agents.
syscallsedrlinux+2
Wild West Hackin' Fest·43 min
Kyle Avery
Industry experts analyze emerging threats surrounding EDR Internals for macOS and Linux | Kyle Avery.
macoslinuxedr
Wild West Hackin' Fest·49 min
Presenters detail vulnerability discovery and exploitation in Roll for Stealth Intro to AV EDR Evasion | Mike Saunders | WWHF Deadwood 2022.
evasionedredr-evasion