Automatic Exploitation of Fully Randomized Executables
| Autor: | Gadient, Austin, Ortiz, Baltazar, Barrato, Ricardo, Davis, Eli, Perkins, Jeff, Rinard, Martin |
|---|---|
| Jazyk: | angličtina |
| Rok vydání: | 2019 |
| Předmět: | |
| Zdroj: | IndraStra Global. |
| ISSN: | 2381-3652 |
| Popis: | We present an automated system, Marten, that automatically generates control flow hijacking exploits against fully randomized executables by combining information leakage and buffer overflow exploits. We present Marten, a new end to end system for automatically discovering, exploiting, and combining information leakage and buffer overflow vulnerabilities to derandomize and exploit remote, fully randomized processes. Results from two case studies high- light Marten’s ability to generate short, robust ROP chain exploits that bypass address space layout randomization and other modern defenses to download and execute injected code selected by an attacker. DARPA Grant HR001118C0059 |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|