VulnCatcher: Fun with Vtrace
Atlas explores vulncatcher: fun with vtrace at DEF CON 16, examining emergency-systems and practical defenses.
Summary
Architecture and Background
DEF CON 16 - Atlas: VulnCatcher: Fun with Vtrace and Programmatic Debugging Countless hours are spent researching vulnerabilities in proprietary and open source software for each bug found. Many indicators of potential vulnerabilities are visible both in the disassembly and debugging, if you know what to look for.
Vulnerability Analysis
How much can be automated? VulnCatcher illustrates the power of programmatic debugging using the VTRACE libraries for cross-platform debugging.
Exploitation and Demonstrations
atlas a disciple of the illustrious Skodo, has a history in programming, systems support, telecom, security, and reverse engineering. His introduction to the hard-core hacking world was through dc13's CTF Qualifiers.
Remediation and Defensive Strategies
Captain of two-time CTF-winner "1@stplace" and individual winner of CTF-2005, atlas has released hacking tools and toolkits such as disass, atlasutils, and is co-maintainer of the python library for x86 disassembly: libdisassemble. For copies of the slides and additional materials please see the DEF CON 16 Archive here:
Related talks
Main Stage·1 hr 54 min
Workshop
Workshop details workshop: Davix Workshop Need help understanding your gigabytes of application logs or network captures.
Main Stage·41 min
Weasel
Weasel details weasel: Compliance: The Enterprise Vulnerability Roadmap Compliance is no longer new.
Main Stage·48 min
Valsmith · Colin Ames
Valsmith and Colin Ames explores metapost-exploitation at DEF CON 16, examining emergency-systems and practical defenses.