Presented at
Summercon 2017,
June 24, 2017, 3 p.m.
(50 minutes)
Using the tools and techniques of today to solve problems that only existed in the 90s and are still alive in DEFCON CTF.
Sophia D'Antoine and Ryan Stortz explain and demo tools built on BInary Ninja's BNIL to find 90s era bugs such as format string vulnerabilities, stack buffer overflows, and command injection.
Presenters:
-
Sophia d'Antoine
as Sophia D'Antoine
Sophia is a senior researcher at Trail of Bits and spends too much time going to noise concerts. Noise, or Noize, not music, found its roots in early electronic and industrial musics. A typical example today is some insane Japanese sound sculptor screaming and pounding sound through endless feedback loops of overdriven distortion pedals and short wave radios, producing waveforms in chaotic and unpredictable shapes. On the other hand you have ‘sounds of refrigerator.' Sometimes it's work that comes with the following suggestion in its liner notes: LISTEN AT NIGHT WHILE SNOW FALLS SILENTLY UNDER STREET LIGHTS. The work is not cathartic.
-
Ryan Stortz
Ryan is a principal researcher and tifosi at Trail of Bits.
@trailofbits @withzombies
Links: