Security researchers at FireEye security Abdulellah Alsaheel and Raghav Pande have found a way to exploit Microsoft EMET (Enhanced Mitigation Experience Toolkit) to hack itself. The tool was introduced by Microsoft to raise the cost of exploit development, it cannot be considered a solution that is able to protect systems from any malicious exploit. The researchers used the GetModuleHandleW function that is not hooked by the tool to retrieve the address of a DLL importing GetModule HandleW. The exit feature is implemented in the emet.dll for cleanly exiting.”]
Source: https://securityaffairs.co/wordpress/44899/hacking/hacking-emet-using-emet.html

