24 Kernel Exploitation Papers

 원문 : http://immunityinc.com/resources-papers.shtml

• June 11, 2008: Exploiting Kernel Pool Overflows (Kostya Kortchinsky)

  • KernelPool.odp

• June 11, 2008: The I2OMGMT Driver Impersonation Attack (Justin Seitz)

  • DriverImpersonationAttack_i2omgmt.pdf

• March 28, 2008: The Hacker Strategy (updated for Harvard ABCD meeting)

  • DaveAitel_TheHackerStrategy2.pdf

• February 29, 2008: IO Immunity Style (Sinan Eren)

  • SinanEren_BHFED2008.pdf

• January 26, 2008: The Hacker Strategy (S4 SCADA conference keynote)

  • DaveAitel_TheHackerStrategy.pdf

• January 22, 2008: Going Against The Gradient

  • GoingAgainstTheGradient.pdf

• December 14, 2007: Beyond Fast Flux

  • BeyondFastFlux.pdf

• November 23, 2007: Exploit Development with Immunity Debugger

  • Debugging_With_ID.odp

• August 10, 2007: Damian Gomez - Intelligent Debugging

  • IntelligentDebugging.pdf

• July 6, 2007: Nicolas Waisman - Understanding and Bypassing Windows Heap Protection

  • Heap_Singapore_Jun_2007.pdf

• July 6, 2007: Justine Aitel - The IPO of 0days

  • 0day_IPO.pdf

• April 8, 2007: Dave Aitel - CANVAS Command Line Executer

  • CANVAS_CLE.odt

• April 8, 2007: Kostya Kortchinsky - Macro-Reliability in Win32 Exploits

  • MacroReliability.odp

• December 6, 2006: Dave Aitel - Remote Language Detection

  • Remote_Language_Detection_in_Immunity_CANVAS.odt

• August 30, 2006: Dave Aitel - MSRPC Fuzzing

  • msrpc_fuzzing_paper.odt

• February 13, 2006: Dave Aitel - Resilience

  • Resilience.pdf res0.1.tgz

• January 26, 2006: Dave Aitel - Nematodes (updated)

  • nematodes2.pdfVisualSploit Preliminary Flash Demo

• September 29, 2005 Dave Aitel - Nematodes

  • nematodes.sxinematodes.pdf

• May 9th, 2005 Dave Aitel - Practical IDS Evasion

  • Practical_IDS_Evasion.sxi

• Feb, 28th, 2005 Bas Alberts - Exploiting the PHP_Limit bug

  • nolimits.pdf

• Jan 29, 2005 Dave Aitel - 0days: How hacking really works

  • 0days.pdf

• Oct 12, 2004 Dave Aitel - The CANVAS Reference Implementation

  • canvas_reference_implementation.sxi

• Oct 12, 2004 Dave Aitel - Advanced Ordnance 2

  • advancedordnance2.pdf

• August 12, 2004 Dave Aitel - Microsoft Windows, a lower Total Cost of Ownership

  • tc0.pdf

• June 21, 2004 Dave Aitel - Beyond Best Practices (Given at OWASP AppSec 2004)

  • beyond_best_practices.sxi

• May 19, 2004 Dave Aitel - Rapid Application Development in Linux using pyGTK

  • pygtk.sxi

• March 1, 2004 Dave Aitel - Enterprise Secific Software Security Issues:

  • enterprise_specific_security.sxw

• Feb 4, 2003 The Advantages of Block-Based Protocol Analysis for Security Testing:

  • advantages_of_block_based_analysis.pdf

• July 29, 2002 Using SPIKE 101

  • usingspike3.ppt

• Feb 24, 2003 - Vivisection of an Exploit Development Process

  • UTF16INTHEWILD-April9.ppt

• May 1, 2003 - Windows Exploitation for Unix Hackers

  • immunity_win32_exploitation.final2.ppt

• Sep 29, 2003 - MOSDEF

  • MOSDEF.ppt

• Jan 27, 2004 - Advanced MOSDEF

  • MOSDEF_Exploitation.sxi

• March 1, 2003 Nicolas Waisman - Linux Heap Overflow Techniques

  • Magic.ppt

• Sep 12, 2003 Microsoft Heap Overflows I/II

  • msrpcheap.pdf

• Sep 12, 2003 Microsoft Heap Overflows II/II

  • msrpcheap2.pdf