Memory Courses

Black Hat

The Dark Age of Memory Corruption Mitigations in the Spectre Era

Explores how speculative execution attacks can bypass memory corruption defenses, challenging established security measures and revealing vulnerabilities in modern computer systems.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Black Hat

Exploring How Memory-Mapped Files Hide From AV and Execute Malicious Code

Explore techniques for using memory-mapped files to conceal malicious payloads and execute code, evading antivirus detection.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Black Hat

iOS Jailbreak Internals - Userland Read-Only Memory Can Be Dangerous

Explora las vulnerabilidades en la memoria de solo lectura de iOS, analizando ataques DMA y explotando fallas en IOSurfaceAccelerator para lograr ejecución de código arbitrario y jailbreak.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

Dealing the Perfect Hand - Shuffling Memory Blocks on Z/OS

Explore mainframe hacking techniques, from network protocols to buffer overflows, and learn to exploit z/OS vulnerabilities for critical system access.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Black Hat

Bochspwn Reloaded - Detecting Kernel Memory Disclosure with x86 Emulation and Taint Tracking

Explore kernel memory disclosure detection using x86 emulation and taint tracking. Learn about buffer overflows, memory corruption, and user-mode client interactions in kernel-mode systems.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Black Hat

Memory Forensics Using Virtual Machine Introspection for Cloud Computing

Explore memory forensics in cloud environments using virtual machine introspection. Learn techniques for trustworthy data collection without system interference, ideal for digital forensics in virtualized settings.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Black Hat

Intra-Process Memory Protection for Applications on ARM and X86 - Leveraging the ELF ABI

Explore intra-process memory protection techniques for ARM and X86 architectures using ELF ABI. Learn about ELFbac system implementation, policy enforcement, and practical applications in software security.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Black Hat

API Deobfuscator - Identifying Runtime-Obfuscated API Calls Via Memory Access Analysis

Unveils a resilient API deobfuscation technique using memory access analysis, overcoming limitations of pattern-based approaches to identify runtime-obfuscated API calls in malware and obfuscated code.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Black Hat

Hey Man, Have You Forgotten to Initialize Your Memory?

Exploiting uninitialized memory in 64-bit IE to bypass ASLR, CFG, and EPM sandbox. Techniques for remote code execution and privilege escalation on Windows 8.1 demonstrated through Pwn2Own contest example.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Black Hat

The Memory Sinkhole - Unleashing An X86 Design Flaw Allowing Universal Privilege Escalation

Unveiling a critical x86 design flaw allowing privilege escalation, exploring forgotten backdoors, and demonstrating how to exploit vulnerabilities in processor architecture.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Black Hat

Blended Web and Database Attacks on Real-Time, In-Memory Platforms

Explore innovative attack vectors on real-time, in-memory platforms, blending web and database vulnerabilities. Learn about new SQL injection techniques, server-side JavaScript exploits, and R-based attacks in SAP HANA.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Black Hat

Reverse Engineering Flash Memory for Fun and Benefit

Explore Flash memory reverse engineering techniques, including direct interaction, reprogramming, and file system analysis. Learn to handle meta information, deal with bad blocks, and leverage journaling file systems for deeper insights.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Black Hat

Creating a Spider Goat - Security with Intel CPU Transactional Memory Support

Explore how Intel CPU's Transactional Synchronisation Extension can enhance security by detecting and reversing unauthorized memory changes, with practical scenarios and demonstrations.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Black Hat

The Beast is in Your Memory

Explore advanced exploitation techniques and control-flow integrity mechanisms. Learn about Return-Oriented Programming, its countermeasures, and how to bypass emerging CFI solutions.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Black Hat

Hiding at Depth - Exploring, Subverting and Breaking NAND Flash Memory

Explore NAND Flash vulnerabilities, learn to hide and discover files on mobile devices, and understand implications for digital forensics and device security. Open-source tools for Android demonstrated.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk