Remedial Heap Overflows: dlmalloc style

Presented at DEF CON 15 (2007), Aug. 4, 2007, 7 p.m. (50 minutes)

Sometimes even the top dudes need a refresher course. Remedial Heap Overflows is not so much a lesson to the lame, but a refresher for the leet. One day the speaker was approached (in a subway, of course) by a top-notch dude (who has his own posse) and asked how they work. Clearly not even the best of the best always know everything.

Presenters:

• Gavin Mead / atlas   as Atlas
  Atlas, a disciple of the illustrious Skodo, has a history in programming, systems support, telecom, security, and reverse engineering. His introduction to the hard-core hacking world was through dc13's CTF Qualifiers. atlas won the individual contest in 2005 and lead the winning team "1@stplace" in 2006. atlas has written the WEP-cracking tool bssid-flatten, the @Utility-Belt (toolkit for hacking and exploitation), and his favorite tool, disass.

Links:

• https://defcon.org/html/defcon-15/dc-15-speakers.html#atlas
• https://infocon.org/cons/DEF CON/DEF CON 15/DEF CON 15 video/DEF CON 15 - Atlas - Remedial Heap Overflows - Video.mp4
• https://www.youtube.com/watch?v=s0L5cfD5SK8

Similar Presentations:

• Black Hat USA 2010 / Advanced AIX Heap Exploitation Methods
• Black Hat USA 2011 / Heap Spray Detection with Heap Inspector