Browser Exploitation Introduction: Part 2 - UAF Against IE 11, Avoiding MemGC and Isolated Heaps скачать в хорошем качестве

Browser Exploitation Introduction: Part 2 - UAF Against IE 11, Avoiding MemGC and Isolated Heaps

In my very first Off By One Security stream I covered "Browser Exploitation Introduction." It was an IE 7 Use After Free vulnerability. In this stream, I am going to move to IE 11 and we'll look at how this particular vulnerability was able to avoid protections such as MemGC and Isolated Heaps, that pretty much killed 90% of UAF and Type Confusion vulnerabilities from being exploitable. Browser exploitation is a moving target, and vulnerabilities such as Use After Free and Type Confusion bugs are commonly discovered; however, the mitigations protecting these types of vulnerabilities can be quite challenging. This is a fun hacking video to help advance your skills from that of techniques such as basic buffer overflows and format string vulnerabilities, onward to heap exploitation. Here is the trigger JavaScript for anyone wanting to recreate it or to try on your own: https://bugs.chromium.org/p/project-z... You will also need a default install of IE11 so that it's not patched.