Learn Python with Generative AI - Self Paced Online
Google AI Professional Certificate - Learn AI Skills That Get You Hired
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore a groundbreaking guest-to-host escape exploitation technique for QEMU/KVM virtio devices in this 27-minute Black Hat conference talk. Delve into the intricacies of the 3dRedPill exploit as presenters Zhijian Shao, Matthew Shao, Jian Weng, and Yue Zhang demonstrate how it bypasses security measures in virtio-gpu devices. Learn about structure-aware fuzzing, performance analysis, and bug analysis techniques used in developing the exploit. Examine the exploitation process, proposed solutions, memory mapping vulnerabilities, and overwrite techniques. Gain valuable insights into virtualization security and potential mitigation strategies for protecting against such sophisticated attacks.
Syllabus
Introduction
Structure aware fuzzing
Performance analysis
Bug analysis
Exploit
Solution
Memory Mapping
Overwrite
Taught by
Black Hat