PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Counterfeit Object-Oriented Programming

bugpwn.com | blog | #vulnerability-research | #exploitation | #binary-exploitation | #cpp | #code-reuse | #vtable | #coop | #cfi-bypass | #exploitation-techniques | #code-reuse-attack
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Counterfeit Object-Oriented Programming (COOP) chains legitimate C++ virtual calls via vtables to bypass CFI. The guide covers gadget mechanics, countermeasures, and a hands-on exploitation lab.
Published
Collected

Related coverage

blog · bugpwn.com
Control Flow Integrity: Theory, Mechanisms and Exploitation.
A complete dive into Control Flow Integrity (CFI): formal definition, coarse- vs fine-grained designs, real-world implementations, limits, and Data-Oriented Programming as a bypass.
blog · bugpwn.com
Binary Exploitation: Jump-Oriented Programming.
Jump-Oriented Programming chains gadgets ending in indirect jumps instead of ret, evading Intel CET shadow stacks; the article covers its history, dispatch architecture, and a hands-on bypass lab.
blog · bughunters.google.com
LLVM's 'RFC: C++ Buffer Hardening' at Google
Google shares how it evaluated LLVM's proposed C++ buffer hardening approach, outlining initial conclusions, practical adoption tips, and the next steps planned in this hardening journey.
blog · blog.trailofbits.com
Sanitize your C++ containers: ASan annotations step-by-step
A step-by-step guide to ASan container annotations for detecting container-overflow bugs in C++ std::vector, std::string, and std::deque, plus Trail of Bits' contributions to libc++ and GCC.
blog · blog.trailofbits.com
Understanding AddressSanitizer: Better memory safety for your code
Trail of Bits explains how AddressSanitizer works, covering shadow memory, redzones, container annotations, limitations, and false positives, plus the LLVM contributions these findings produced.
blog · blog.trailofbits.com
The life and times of an Abstract Syntax Tree
A Trail of Bits engineer discusses AST design pragmatics for compiler authors: node structure, memory layout, and API trade-offs between naive, OOP, and index-based approaches.
Back