SIL765: Network & System Security : Other Links

Heap spraying --- in depth

  1. MALLOC DES-MALEFICARUM (phrack BlackAngel)
  2. Ben Hawkes Vista Heap Attacks
    3. good overview of heap layout/attack vectors and recipes as he calls them to setup your heap state.
  3. Low Fragmentation Heap by Chris Valasek
    4. given in Argentina at ektoparty? Same one was delivered at Blackhat USA 2010
  4. Advanced Doug lea’s malloc exploits Phrack
  5. Max’s Vudoo Paper in Phrack
  6. Dion Blazakis JIT Spraying
  7. Filling Adobe’s Heap
    8. good overview on how to fillup the heap with data in different programs. Not limited to adobe nor javascript.
  8. Once upon a free(), Phrack
  9. Heap Feng Shui by Alexander Sotirov
    10. Great talk on heap techniques and he releases his heaplib.js code to manipulate the heap in javascript.
  10. HeapDraw
    11. visualization tool for seeing the output of memory allocations in your target application.
  11. Heap Massage by Gera
  12. Yet another free()
    13. article at phrack
  13. Sean Heelan TCMalloc Scripts
    14. importance of scripts and heap information
  14. Reliable windows heap exploits
  15. Double free vulnerabilities
  16. Huku’s phrack article on another free()
  17. Runtime detection of heap overflows
  18. Heaps About Heaps by Insomniac Security

Fuzzing

  1. Fuzzing - making software dumber
  2. Fuzzing and Testing