Organizer
Partner Company
JavaScript VM breakout based exploiting
Tombkeeper
Abstract
Modern Windows use mitigation techniques such as DEP and ASLR to mitigate exploitation. The combination of ASLR and DEP have been proven to be a solid shield in most cases. Mitigation bypass is always one of the hottest topic in the security community. This presentation will introduce a new DEP and ASLR bypass technique, which is based on JavaScript VM breakout. This technique don't need ROP, JIT, third-party plugins or Non-ASLR modules.
Speaker Info
Tombkeeper is the Head of Xuanwu Security Lab at Tencent. He has more than a decade of experience researching and working in the computer security space. He has spoken at many security conferences in the past, on different topics at BlackHat, CanSecWest, HITCon, XCon, and etc. He is also a $100,000 Microsoft Mitigation Bypass bounty winner.