Defeating Data Execution Prevention and ASLR in Windows

Data prevention Execution (DEP) and Address space layout randomization (ASLR) are two protection mechanisms integrated in Windows operating system to make more complicated the task of exploiting software. This document show how these two features can be bypassed using different techniques.

Author: Brian Mariani, Senior Security Auditor at High-Tech Bridge SA

Data prevention Execution (DEP) and Address space layout randomization (ASLR) are two protection mechanisms integrated in Windows operating system to make more complicated the task of exploiting software. This document show how these two features can be bypassed using different techniques.

PDF: Defeating Data Execution Prevention and ASLR in Windows (1,3 MB)
Video: Defeating Data Execution Prevention and ASLR in Windows
Video: Tracing the Exploit
HeapCreate.asm
VirtualAllocandWriteProcessMemory.asm
VirtualProtect.asm
VulnerableServer.cpp

User Comments

Add Comment

Allowed BB codes: [i], [u], [b], [quote]. Insulting or inappropriate comments will be immediately deleted. HTML is not allowed.

I agree with Privacy Policy