Articles with tag: Data-Only Attack
POSTED BY: Nikos Sampanis / 28.02.2018

Windows 10 RS2/RS3 GDI data-only exploitation tales (OffensiveCon 2018)

Hello, I'm Nikos Sampanis, a security researcher working at CENSUS. On February 16th, 2018 I presented at OffensiveCon a talk with the title "Windows 10 RS2/RS3 GDI data-only exploitation tales". The presentation focused on a mitigation introduced in the Win32k component of Microsoft Windows to prevent the exploitation of memory corruptions in the session heap (due to GDI object abuse).


POSTED BY: CENSUS / 08.02.2018

OffensiveCon 2018

CENSUS is proud to announce its participation in OffensiveCon 2018 as a Silver Sponsor.