Table Of Content

Owned Over Amateur Radio Remote Kernel Exploitation in 2011 Dan Rosenberg Copyright © 2011 Virtual Security Research, LLC. 1 All Rights Reserved. Who am I? ▪ Security consultant and vulnerability researcher at Virtual Security Research in Boston ▫ App/net pentesting, code review, etc. ▫ Published some bugs ▫ Focus on Linux kernel ▫ Research on kernel exploitation and mitigation Copyright © 2011 Virtual Security Research, LLC. 2 All Rights Reserved. Agenda ▪ Motivation ▪ Challenges of remote exploitation ▪ Prior work ▪ Case study: ROSE remote stack overflow ▫ Exploitation ▫ Backdoor ▪ Future work Copyright © 2011 Virtual Security Research, LLC. 3 All Rights Reserved. Motivation Why am I giving this talk? Copyright © 2011 Virtual Security Research, LLC. 4 All Rights Reserved. Why Remote Kernel Exploits? ▪ Instant root ▫ No need to escalate privileges ▪ Remote userland exploitation is hard! ▫ Full ASLR + NX/DEP ▫ Sandboxing ▫ Reduced privileges Copyright © 2011 Virtual Security Research, LLC. 5 All Rights Reserved. Goals of This Talk ▪ Sorry, not actually an amateur radio talk ▪ Exploit development methodology ▪ Individual bugs vs. exploit techniques ▪ Discuss next steps for kernel hardening Copyright © 2011 Virtual Security Research, LLC. 6 All Rights Reserved. Challenges of Remote Kernel Exploitation Wait, so you mean this is kind of hard? Copyright © 2011 Virtual Security Research, LLC. 7 All Rights Reserved. Warning: Fragile ▪ Consequence of failed remote userland exploit: ▫ Crash application/service, wait until restarted ▫ Crash child process, try again immediately ▪ Consequence of failed remote kernel exploit: ▫ Kernel panic, game over Copyright © 2011 Virtual Security Research, LLC. 8 All Rights Reserved. Lack of Environment Control ▪ Typical local kernel exploit: ▫ Can trigger allocation of heap structures ▫ Can trigger calling of function pointers ▫ High amount of information leakage available to local users ▪ Remote kernel exploit: ▫ ? Copyright © 2011 Virtual Security Research, LLC. 9 All Rights Reserved. Escape From Interrupt Context ▪ Many remote kernel issues occur in interrupt context ▫ Asynchronous networking events ▪ End goal: userland code execution (remote shell) ▫ How do we get there? ▫ No process backing execution ▪ Need to transition ▫ Interrupt context to process context to userland Copyright © 2011 Virtual Security Research, LLC. 10 All Rights Reserved.

Description:

Owned Over Amateur Radio Remote Kernel Exploitation in 2011. Amateur Radio X.25 PLP (Rose) protocol. A remote user can cause a denial of service by providing

Owned Over Amateur Radio - Dan Rosenberg PDF

74 Pages·2011·0.24 MB·English

by

Checking for file health...

Save to my drive

Quick download

Download

Upgrade Premium

Most books are stored in the elastic cloud where traffic is expensive. For this reason, we have a limit on daily download.

Download Owned Over Amateur Radio - Dan Rosenberg PDF Free - Full Version

by Unknow| 2011| 74 pages| 0.24| English

Download Owned Over Amateur Radio - Dan Rosenberg by in PDF format completely FREE. No registration required, no payment needed. Get instant access to this valuable resource on PDFdrive.to!

Free Download PDF

About Owned Over Amateur Radio - Dan Rosenberg

Owned Over Amateur Radio Remote Kernel Exploitation in 2011. Amateur Radio X.25 PLP (Rose) protocol. A remote user can cause a denial of service by providing

Detailed Information

Author:	Unknown
Publication Year:	2011
Pages:	74
Language:	English
File Size:	0.24
Format:	PDF
Price:	FREE

Download Free PDF

Safe & Secure Download - No registration required

Why Choose PDFdrive for Your Free Owned Over Amateur Radio - Dan Rosenberg Download?

100% Free: No hidden fees or subscriptions required for one book every day.
No Registration: Immediate access is available without creating accounts for one book every day.
Safe and Secure: Clean downloads without malware or viruses
Multiple Formats: PDF, MOBI, Mpub,... optimized for all devices
Educational Resource: Supporting knowledge sharing and learning

Frequently Asked Questions

Is it really free to download Owned Over Amateur Radio - Dan Rosenberg PDF?

Yes, on https://PDFdrive.to you can download Owned Over Amateur Radio - Dan Rosenberg by completely free. We don't require any payment, subscription, or registration to access this PDF file. For 3 books every day.

How can I read Owned Over Amateur Radio - Dan Rosenberg on my mobile device?

After downloading Owned Over Amateur Radio - Dan Rosenberg PDF, you can open it with any PDF reader app on your phone or tablet. We recommend using Adobe Acrobat Reader, Apple Books, or Google Play Books for the best reading experience.

Is this the full version of Owned Over Amateur Radio - Dan Rosenberg?

Yes, this is the complete PDF version of Owned Over Amateur Radio - Dan Rosenberg by Unknow. You will be able to read the entire content as in the printed version without missing any pages.

Is it legal to download Owned Over Amateur Radio - Dan Rosenberg PDF for free?

https://PDFdrive.to provides links to free educational resources available online. We do not store any files on our servers. Please be aware of copyright laws in your country before downloading.

The materials shared are intended for research, educational, and personal use in accordance with fair use principles.