Writing Toolkits for Finding Zero-day Flaws With PinTool

Junbo Shim (passket)

Junbo Shim (passket)

Abstract

Offensive security의 정점에는 0-day 취약점이 있다고 해도 과언이 아니라고 생각한다.
이 트레이닝 코스에서는 Intel x86 binary에서 0-day 취약점을 찾고자 할 때 사용하는 여러가지 도구들을 Intel Pintool을 사용하여 제작해보고 이를 통해 0-day취약점을 효율적으로 찾을 수 있는 방법을 알아보고자 한다.
제작하는 툴킷에는 use-after-free 탐지, dangling pointer 탐지, reachability 해결을 위한 도구, 상호성 문제를 통한 버그 탐지 등의 툴킷 개발이 포함된다.

[Schedule] 2일 과정(10:00-17:00)

Trainer Info

Junbo Shim (passket)

Junbo Shim (passket)

2012, 2013 Best of the Best mentor
2011 PADOCON CTF online make a challenges, administration
2010 PADOCON CTF online & offline make a challenges, administration
2010 PADOCON Maintainer
2006 PADOCON CTF online & offline make a problem, administration
2005 UDCSC Hacking Contest make a problem, administration
2005 AHF make a problem, administration
2005 ARGOS chief

2012 Codegate 2012 announcement(Flow Based Vulnerability Discovery)
2012 Codegate 2012 Training Course(effective vulnerability discovery)
2012 KISA workshop announcement(about APT)
2011 POC 2011 announcement(Special Tricks for Exploiting)
2011 POC 2011 Training Course(Finding 0-day)
2011 KAIST Cybersecurity Workshop(Advanced 0-day Detection)
2011 PADOCON 2011 announcement(Hunting Trip - Automated vulnerability finding)
2010 CodeEngn 2010 announcement(Taint Analysis for Vulnerability Discovery)
2010 PADOCON 2010 announcement(Exploiting Windows Vista Kernel : SMB Case Study)
2009 SecurityProof.org 2009 1st Offline Seminar(CPU Bugs Return!)
2009 PADOCON 2009 announcement(A Practice of Remote Code Execution using CPU bugs)
2006 PADOCON 2006 announcement(White-Bot Project)
2005 CONCERT tech workshop demonstration(about newal BOT)
2005 KISA Workshop about homepage demonstration(hacking from china)
2005 2nd AHF announcement(I don't remember the topic)
2005 PADOCON 2005 announcement(Honeynet based University)
2004 1st AHF announcement(Zero-effort attack)

2012 KISA 8th HDCON silver prize
2011 Codegate YUT Challenge 3th
2010 ISEC CTF 3th
2010 KISA 7th HDCON silver prize
2009 Codegate 2009 Hacking Contest 5th
2009 JFF Hacking Contest 4th
2008 HITB Malaysia CTF 4th
2008 WISC National Hacking Defence Contest 1st

Organizer

Organizer Logo

Partner Company

Partner Company Logo

Sponsors

POC Conference is made possible thanks to the support of our sponsors. Their continued partnership has played a vital role in sustaining and growing POC over the years. We sincerely thank them for their contribution.


Sponsors

Supporting Friends

Supporting Friends