Get a Pentest and security assessment of your IT network.

Cyber Security

Google Researcher Ships Exploit to Defeat ASLR+DEP

The exploit, released by Google security researcher SkyLined, uses the ret-into-libc technique to bypass DEP (Data Execution Prevention) and launch code execution attacks on x86 platforms. Microsoft introduced ASLR + DEP in Windows Vista, touting them as significant anti-exploit mechanisms but researchers have spent the better part of the last year finding ways around these mitigations. At the 2008 Black Hat conference, hackers Mark Dowd and Alex Sotirov demonstrated the new methods to get around ASLR and DEB.

Source: https://threatpost.com/google-researcher-ships-exploit-defeat-aslrdep-030110/73608/

Related posts
Cyber Security

Zip Codes & PII: Are They Personal Data?

Cyber Security

Zero-Day Vulnerabilities: User Defence Guide

Cyber Security

Zero Knowledge Voting with Trusted Server

Cyber Security

ZeroNet: 51% Attack Risks & Mitigation