← All talks

Writing Windows N-days

BSides Boulder · 202049:58188 viewsPublished 2020-11Watch on YouTube ↗
Speakers
Tags
CategoryTechnical
DifficultyAdvanced
StyleTalk
About this talk
Analysis of three Windows N-day exploits (BlueKeep, CVE-2020-1015, CVE-2020-1054). Demonstrate the tools and approach utilized to analyze the vulnerabilities and write the exploits prior to any public code release. Use these examples to show how other people can get into Windows Kernel Exploitation. The talk will start with an intro into Windows N-days for people unfamiliar with the topic. The talk will cover all phases of the exploitation process from identifying the vulnerability to writing a fully functional exploit. During the talk an emphasis will be placed on the tools and approaches used to determine the vulnerability and develop the exploit prior to public exploit code release. The overarching goal will attempt to show how anyone interested can get into windows kernel exploitation.