Practical Web Browser Exploiting

passket (심준보)

passket (심준보)

Abstract

최근 많은 웹브라우저들이 사용되고 있다. 그 사용빈도 만큼이나 심심치않게 Web Browser를 공격대상으로 공격하 는 악성코드나 익스플로잇을 볼 수 있는데, 일반적인 어플리케이션의 공격방식과는 Web Browser를 대상으로 공격하는 방식은 많은 차이가 있다. 이 트레이닝 코스에서는 일반적으로 Web Browser의 취약점을 발견하는 방법과 발견한 취약점을 통해 Web Browser를 공격하는 기법들, 그리고 Web Browser가 사용하는 보안 매커니즘들을 알아보고, 이를 우회하는 방법들에 대해서 살펴본다.

Trainer Info

passket (심준보)

passket (심준보)

2004 1st AHF announcement( Zero-effort attack )
2005 PADOCON 2005 announcement( Honeynet based University )
2005 2nd AHF announcement( I don't remember the topic )
2005 KISA Workshop about homepage demonstration( hacking from china )
2005 CONCERT tech workshop demonstration( about newal BOT )
2006 PADOCON 2006 announcement( White-Bot Project )
2009 PADOCON 2009 announcement( A Practice of Remote Code Execution
using CPU bugs )
2009 SecurityProof.org 2009 1st Offline Seminar( CPU Bugs Return ! )
2010 PADOCON 2010 announcement( Exploiting Windows Vista Kernel : SMB
Case Study )
2010 CodeEngn 2010 announcement( Taint Analysis for Vulnerability Discovery )
2011 PADOCON 2011 announcement( Hunting Trip - Automated vulnerability finding )
2011 KAIST Cybersecurity Workshop( Advanced 0-day Detection )
2011 POC 2011 Training Course( Finding 0-day )
2011 POC 2011 announcement( Special Tricks for Exploiting )
2012 KISA workshop announcement( about APT )
2012 Codegate 2012 Training Course( effective vulnerability discovery )
2012 Codegate 2012 announcement( Flow Based Vulnerability Discovery )

Organizer

Organizer Logo

Partner Company

Partner Company Logo

Sponsors

POC Conference is made possible thanks to the support of our sponsors. Their continued partnership has played a vital role in sustaining and growing POC over the years. We sincerely thank them for their contribution.


Sponsors

Supporting Friends

Supporting Friends