Is that a penguin in my Windows?

Presented at DerbyCon 6.0 Recharge (2016), Sept. 23, 2016, 3 p.m. (25 minutes)

One of the latest features coming out in Windows is the new Windows Subsystem for Linux. This brand new system provides translations for Linux syscalls via a new kernel interface. This talk will go over the technical details of this brand new interface with a focus on it’s security implications. We’ll go over features that might be beneficial to be leveraged by pentesters as well as what how the new subsystem can be abused by local exploits targeting Windows.

Presenters:

• Spencer McIntyre / ZeroSteiner   as Spencer McIntyre

Similar Presentations:

• REcon Brussels 2018 / Linux Vulnerabilities, Windows Exploits: Escalating Privileges with WSL
• BSidesLV 2016 / Is that a penguin in my Windows?
• Black Hat USA 2016 / The Linux Kernel Hidden Inside Windows 10