Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The Windows Registry Adventure #7: Attack surface analysis

projectzero.google | blog | #attack-surface | #fuzzing | #windows | #kernel | #research | #registry

Summary

Part 7 of the Windows Registry Adventure series, mapping which Windows components parse registry data and identifying the most promising attack surface for deeper research.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
The Windows Registry Adventure #6: Kernel-mode objects
Part 6 of the Windows Registry Adventure series, examining kernel-mode registry objects and the additional attack surface they expose to privilege escalation research.
blog · projectzero.google
The Windows Registry Adventure #1: Introduction and research results
Part 1 of the Windows Registry Adventure series, introducing the research goals, methodology, and headline results from auditing how Windows parses registry data.
blog · projectzero.google
Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages
Part one of a macOS audio series: building a fuzzer for CoreAudio by sending Mach messages, covering the attack surface, harness design, and early results.
blog · projectzero.google
Driving forward in Android drivers
A look at the Android kernel driver attack surface, summarizing research progress, recurring bug classes, and directions for hardening and future driver security work.
blog · projectzero.google
The Windows Registry Adventure #2: A brief history of the feature
Part 2 of the Windows Registry Adventure series, giving a brief history of the registry as a Windows feature and how its evolution shaped today's attack surface.
blog · projectzero.google
A year of Windows kernel font fuzzing #2: the techniques
Second part of a series on a year-long fuzzing effort against the Windows kernel font engine, detailing the techniques and design decisions that made the project effective.
back