String Oriented Programming
Circumventing ASLR, DEP, and Other Guards
Video Player
Playlists:
'28c3' videos starting here
/
audio
/
related events
Media error: Format(s) not supported or source(s) not found
Download File: https://ftp.fau.de/cdn.media.ccc.de//congress/2011/webm/28c3-4817-en-string_oriented_programming.webm00:00
00:00 | 00:00
The protection landscape is changing and exploits are getting more and more sophisticated. Exploit generation toolkits can be used to construct exploits for specific applications using well-defined algorithms. We present such an algorithm for leveraging format strings and introduce string oriented programming.
