Use-After-Free Vulnerability Courses and Certifications

DevConf

Understanding and Explaining Use-After-Free Vulnerability - A Critical Security Flaw

Discover Use-After-Free vulnerabilities in C/C++: explore root causes, exploitation techniques through demos, and learn prevention strategies to secure your applications.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Black Hat

The Power of Pair - One Template that Reveals 100+ UAF IE Vulnerabilities

Discover a unique fuzzing strategy that revealed over 100 IE use-after-free vulnerabilities. Learn about the vulnerability hunting system and techniques used to find critical browser security flaws.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Black Hat

Ret2page - The Art of Exploiting Use-After-Free Vulnerabilities in the Dedicated Cache

Explore a new exploitation technique for Use-After-Free vulnerabilities, focusing on SLUB and BUDDY allocators to improve efficiency and success rates in physical page reuse and Android rooting.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Black Hat

Breaking Android Kernel Isolation and Rooting with ARM MMU Features

Explore a new Android rooting solution, ReVent, exploiting a Use-After-Free vulnerability in 3.18 Linux kernels. Learn about breaking kernel isolation and ARM MMU features for device security.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Use After Free Exploitation - Detecting and Exploiting Heap Vulnerabilities

Explore Use After Free vulnerabilities, their detection, and exploitation in web browsers. Learn about memory leaks and ASLR bypass techniques from an industry expert.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Black Hat

The Art of Exploiting UAF by Ret2bpf in Android Kernel

Explore Android kernel exploitation techniques, focusing on a Use-After-Free vulnerability in xt_qtaguid. Learn about KASLR bypass, rooting methods, and security measures against such attacks.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Black Hat

Attacking iPhone XS Max

Explore iPhone XS Max vulnerabilities, including PAC implementation, XNU bug exploitation, and kernel read/write access. Learn about Unix Domain Socket, race conditions, and unprotected control flow transfer points.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Black Hat

Use-After-Use-After-Free - Exploit UAF by Generating Your Own

Explore a novel exploitation technique for UAF vulnerabilities in Adobe Flash, transforming them into multi-class type confusions for full memory access despite recent mitigations.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

A Deep Dive Into Two Windows Exploits Demonstrated at Pwn2Own

Explore Windows kernel exploitation through analysis of two Pwn2Own exploits. Learn about vulnerability discovery, exploit development, and evolving kernel mitigations in this deep dive into advanced Windows security research.

• YouTube
• 52 minutes
• On-Demand
• Free Video

Black Hat

Abusing Silent Mitigations - Understanding Weaknesses Within Internet Explorer

Explore Internet Explorer's silent exploit mitigations, their weaknesses, and potential attack vectors. Learn techniques to bypass these security measures and gain insights into hardening browser defenses.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Exploiting a Limited UAF on Ubuntu 22.04 to Achieve LPE

Detailed exploration of exploiting a Linux kernel vulnerability in Ubuntu 22.04 to achieve local privilege escalation, focusing on advanced exploitation techniques and bypass methods.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Exploiting UAF by Ret2bpf in Android Kernel

Exploiting a 10-year-old Use-After-Free vulnerability in Android's xt_qtaguid kernel module, demonstrating local privilege escalation on Mi9 device using ret2bpf technique to bypass protections.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Mitigating Use-after-frees in the Linux Kernel

Explore techniques for mitigating use-after-free vulnerabilities in the Linux kernel, covering performance trade-offs, pointer checks, and RCU implementation strategies.

• YouTube
• 46 minutes
• On-Demand
• Free Video

OWASP Foundation

AppSecUSA 2014 - Breakers Track Sessions

Explore cutting-edge web and mobile security topics, including mobile attacks, use-after-free exploitation, static analysis, runtime manipulation, and top hacking techniques from AppSecUSA 2014.

• YouTube
• 6 hours 12 minutes
• On-Demand
• Free Video

Black Hat

Evils in the Sparse Texture Memory - Exploiting Kernel Vulnerabilities in GPU APIs

Unveils vulnerabilities in PowerVR GPU, demonstrating exploits using OpenGL APIs. Explores physical page UAF issues in sparse texture memory management, offering detection solutions and a device rooting demo.

• YouTube
• 40 minutes
• On-Demand
• Free Video