5 ms·

Windows Exploitation Tricks: Abusing the User-Mode Debugger

• tomglynch 7y ago
  Why is project zero hosted on blogspot?
  • Larrikin 7y ago
    Google owns it.
    • tomglynch 7y ago
      They don't host their 'cloud' blog on blogspot: https://cloud.google.com/blog/topics/inside-google-cloud/an-update-on-sundays-service-disruption https://cloud.google.com/blog/topics/inside-google-cloud/an-... So why project zero?
      • babuskov 7y ago
        It was probably the easiest route. Instead of setting up a special website for it, they just made a blog with a couple of clicks. Project zero goes back to 2014. Perhaps the infrastructure wasn't there, or it started as a small pilot project.
      • AstralStorm 7y ago
        They probably do host Blogspot on their cloud though.
      • mehrdadn 7y ago
        Confused, why is this a big deal? It seems like such a minor thing.
  • deleted 7y ago
    [deleted]
  • la_barba 7y ago
    Maybe now Google wont kill that service if their employees rely on it.. :P
• drejay 7y ago
  Should you need the services of a good hacker, talk to darkcracker@protonmail.com, dude is good.
• maxheadroom 7y ago
  >Windows Exploitation Tricks: Abusing the User-Mode Debugger ...and... >Nothing I’ve described here is a security vulnerability, but the behavior is interesting and it’s worth looking out for cases where it could be used. Maybe I'm misunderstanding this newfangled internets but isn't exploitation generally synonymous with security vulnerability? JFYI, for anyone who's interested, the equivalent debugging API methods in .NET could be found in ClrMd[0] but it's as unyielding a beast as the native methods. [0] - https://github.com/microsoft/clrmd https://github.com/microsoft/clrmd
  • XMPPwocky 7y ago
    A vulnerability is "this function will write 8 bytes of arbitrary data out of bounds in an edge case". Exploitation is the process of using that vulnerability to, typically, cause the process to execute attacker-controlled code. Something can make exploitation easier without being a vulnerability. For example, disabling exploit mitigations like ASLR does this.
  • deleted 7y ago
    [deleted]
• peter_d_sherman 7y ago
  User mode debugging is an area that any present or future OS designer should be concerned about getting right in terms of debugging features vs. security implications...