Browser Exploitation

Peter Vreugdenhil

Peter Vreugdenhil

Exodus Intelligence


Abstract

ExodusIntel - Peter Vreugdenhil(@WTFuzz) / Nov 5-6

[Trainer] Co-Founder and VP of Operations at Exodus Intelligence
[Course] This two day class, taught by a former Pwn2Own winner and pioneer in the art of client-side vulnerability development, is a highly interactive, hands-on training delving into the intricacies of browser exploitation. This course starts by introducing the methods used to uncover some of the most impactful recent browser vulnerabilities, and then quickly moves into the processes of in-depth analysis and vulnerability comprehension, revealing the tools and techniques used by the Exodus team to transform crashes into reliable exploits, bypassing modern protections such as DEP and ASLR along the way.
Students will develop a working familiarity with the concepts presented through hands-on exercises, applying the course material to exploit modern vulnerabilities such as MS012-063. This course focuses on Internet Explorer, but students will leave equipped with a foundation of knowledge and insight applicable to exploiting any modern browser.
Requirements for the training:

  1. Laptop capable of running a windows 7 VM, this will be in VMWare Workstation 6 format.
  2. IDA 6+
  3. Basic assembly knowledge
  4. Knowledge of HTML and Javascript would make things a lot easier.

[Schedule] 2 Days(09:00-18:00)

Trainer Info

Peter Vreugdenhil

Peter Vreugdenhil

Organizer

Organizer Logo

Partner Company

Partner Company Logo

Sponsors

POC Conference is made possible thanks to the support of our sponsors. Their continued partnership has played a vital role in sustaining and growing POC over the years. We sincerely thank them for their contribution.


Supporting Friends