Reliable Windows Heap Exploits.pptVIP

Reliable Windows Heap Exploits Matt Conover Oded Horovitz Agenda Introduction to heap exploits Windows heap internals Arbitrary memory overwrite explained Applications for arbitrary memory overwrite + exploitation demos Special notes for heap shellcodes XP SP2 Q A Introduction Heap vulnerabilities become mainstream DCOM, Messenger, MSMQ, Script Engine Need to be an expert to exploit them David Litchfield – “Windows Heap Overflows” LSD – “Microsoft windows RPC security vulnerabilities” Dave Aitel – “Exploiting the MSRPC heap overflow I,II” Halvar – “3rd Generation exploits” Introduction Ev