Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Using Binary Diffing to Discover Windows Kernel Memory Disclosure Bugs

projectzero.google | blog | #information-disclosure | #windows | #reverse-engineering | #kernel | #patch-analysis | #project-zero | #binary-diffing

Summary

A Project Zero post on using binary patch diffing to uncover Windows kernel memory disclosure bugs, including methodology, tooling, and notable findings from this approach.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
Attacking the Windows NVIDIA Driver
A Project Zero post on attacking NVIDIA's Windows kernel graphics driver, covering several of the 16 vulnerabilities found during this GPU attack surface research.
blog · projectzero.google
A year of Windows kernel font fuzzing #2: the techniques
Second part of a series on a year-long fuzzing effort against the Windows kernel font engine, detailing the techniques and design decisions that made the project effective.
blog · projectzero.google
A year of Windows kernel font fuzzing #1: the results
Part one of a series on a year of at-scale fuzzing that found 16 vulnerabilities in Windows kernel TrueType and OpenType font handling, presenting results and bug collision case studies.
blog · projectzero.google
Windows Drivers are True’ly Tricky
A bug in the TrueCrypt Windows driver, despite prior security audits, lets a normal user or low-integrity sandbox remap the main system drive and elevate privileges to SYSTEM or kernel.
blog · projectzero.google
Dude, where’s my heap?
A Google Project Zero post examining heap spraying and heap address randomization, and how browser exploits can still succeed against them.
blog · projectzero.google
In-Console-Able
A Google Project Zero post describing a Windows security bug that weakens sandbox-style restrictions and could aid sandbox escape research.
back