In this talk, we will introduce a precise automated memory layout manipulation technique. We will demonstrate that using this manipulation technique, an attacker could not only easily identify the system calls tied to the objects of interest but, more importantly, automatically assemble system calls to adjust memory layout and thus obtain the desired memory layout useful for exploitation.

By Yueqi Chen, Xinyu Xing and Jimmy Su

Full Abstract & Presentation Materials: https://www.blackhat.com/eu-19/briefi...