Skip to content
No description, website, or topics provided.
Branch: master
Clone or download
Latest commit fd84cfe Jul 8, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
LICENSE Initial commit Jul 8, 2019
README.md Update README.md Jul 8, 2019
Windows10.mkv Add files via upload Jul 8, 2019
Windows7.mkv Add files via upload Jul 8, 2019
leHack.pdf Add files via upload Jul 8, 2019
leHack.pptx Add files via upload Jul 8, 2019

README.md

leHACK 2019: Analyzing CVE-2018-8453: An interesting tale of UAF and Double Free in Windows Kernel

This talk was delivered at leHACK 2019

Abstract

In this talk, we discuss intricate details of exploitation of CVE-2018-8453, a vulnerability in win32.sys Microsoft Windows driver. It which was reported by Kaspersky Lab as it was being used in highly targeted attacks.

In this talk, we discuss its intricate details, how to reproduce it and how to exploit the vulnerability on different versions of Windows as the vulnerable code is present in Windows 7, 8.1 and 10 as well (though we will be demonstrating it on Windows 7 and Windows 10 only).

Key takeaways

After attending the talk, the attendees will have knowledge about:

  • How to do binary diffing
  • Locating vulnerable code from description of vulnerability
  • Exploiting Use After Free vulnerability in Windows Kernel
  • Exploiting double free vulnerability in Windows Kernel
  • Various challenges in writing kernel exploits (mitigations and bypasses)
  • Performing Heap Spray and Data Only Attacks (on different Windows versions)

Twitter

You can’t perform that action at this time.