ELFPack - ELF Binary Section Docking in Stageless Payload Delivery
Ekoparty Security Conference via YouTube
Live Online Classes in Design, Coding & AI — Small Classes, Free Retakes
AI, Data Science & Cloud Certificates from Google, IBM & Meta
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore a 45-minute conference talk from Ekoparty 2022 that delves into ELF binary construction and the innovative use of ELF sections for payload hosting, retrieval, and loading. Learn about the concept of ELF section docking, which allows for independent attachment of payload-containing sections to loaders. Discover techniques for in-field re-attachment of sections without compilers, useful for long-term offensive operations. Examine how ELF docking serves as an alternative to packing for complex payloads, offering flexibility in various delivery scenarios. Gain insights into detection evasion features implemented in open-source proof-of-concept tools. Presented by Dimitry Snezhkov, a former red team operator now focused on security research and tool development.
Syllabus
Dimitry Snezhkov (CyberFinance) - ELFPack: ELF Binary Section - Ekoparty 2022
Taught by
Ekoparty Security Conference