ALPChecker: Detecting Spoofing and Blinding Attacks on ALPC - HITB 2023
Hack In The Box Security Conference via YouTube
PowerBI Data Analyst - Create visualizations and dashboards from scratch
NY State-Licensed Certificates in Design, Coding & AI — Online
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This research talk presents ALPChecker, a tool for detecting kernel-mode attacks on Windows ALPC connections. It explains how comparing client and server information about ALPC port structures can reveal spoofing and blinding attacks that evade security alerts.
Syllabus
#HITB2023HKT #COMMSEC D1 - ALPChecker: Detecting Spoofing/Blinding Attacks - A. Kropova & I. Korkin
Taught by
Hack In The Box Security Conference