Emoji Shellcoding: 🛠️, 🧌, and 🤯

Presented at DEF CON 30 (2022), Aug. 12, 2022, 1 p.m. (45 minutes).

Shellcodes are short executable stubs that are used in various attack scenarios, whenever code execution is possible. After quickly recalling what a shellcode is and why designing shellcodes under constraints is an art, we'll study a new constraint for which (to the best of our knowledge) no such shellcode was previously known: emoji shellcoding. We'll tackle this problem by introducing a new and more generic approach to shellcoding under constraints. Brace yourselves, you'll see some black magic weaponizing these cute little emojis 🥰 into merciless exploits 👿.

Presenters:

• Hadrien Barral - Hacker
  Hadrien Barral is an R&D engineer and security expert, focusing on intrusion and high-assurance software. He enjoys hacking on exotic hardware.
• Georges-Axel Jaloyan - Hacker
  Georges-Axel Jaloyan is an R&D engineer, focusing on formal methods applied to cybersecurity. He enjoys reverse-engineering and formalizing anything he comes by, always for fun and sometimes for profit.

Links:

• https://forum.defcon.org/node/241820
• https://infocon.org/cons/DEF CON/DEF CON 30/DEF CON 30 video and slides/DEF CON 30 - Hadrien Barral - Emoji Shellcoding.mp4
• https://infocon.org/cons/DEF CON/DEF CON 30/DEF CON 30 video and slides/DEF CON 30 - Hadrien Barral - Emoji Shellcoding.srt (subtitles)
• https://www.youtube.com/watch?v=E8puAkalMRQ

Similar Presentations:

• DEF CON 22 (2014) / Shellcodes for ARM: Your Pills Don't Work on Me, x86
• DEF CON 20 (2012) / Demorpheus: Getting Rid Of Polymorphic Shellcodes In Your Network
• DEF CON 27 (2019) / The ABC of Next-Gen Shellcoding