Bypass Control Flow Guard Comprehensively

Channel:

All Hacking Cons

Subscribers:

5,970

Published on January 3, 2022 3:41:58 PM ● Video Link: https://www.youtube.com/watch?v=5FnLvsU--r8

Duration: 34:00

17 views

0

Control Flow Guard (CFG) is an exploit mitigation technique that Microsoft enabled in Windows 8.1 Update 3 and Windows 10 technical preview. CFG checks the target of indirect call and raises an exception if the target is invalid, thus preventing a vital step of many exploit techniques.

This talk analyses the weak-point of CFG and presents a new technique that can be used to bypass CFG comprehensively and make the prevented exploit techniques exploitable again. Furthermore, this technique is based on a generic capability, thus more exploit techniques can be developed from that capability.

PRESENTED BY
Yunhai Zhang

Black Hat - USA - 2015 Hacking conference
#hacking, #hackers, #infosec, #opsec, #IT, #security