MENU

Resources(82)

  • Black Hat Europe 2011 update

    Patroklos Argyroudis

    Black Hat Europe 2011 is now over and we are very happy to have participated once again in the best European IT security conference!

  • FreeBSD kernel exploitation mitigations

    Patroklos Argyroudis

    In my recent Black Hat Europe 2010 talk I gave an overview of the kernel exploitation prevention mechanisms that exist on FreeBSD. A few people at the conference have subsequently asked me to elaborate on the subject. In this post I will collect all the information from my talk and the various discussions I had in the...

  • Static SSP canary in Debian libc6

    CENSUS

    A vulnerability in older Debian GNU libc (libc6 ≤ 2.7) caused stack protection (SSP / -fstack-protector) to use a fixed, predictable canary value (0xff0a0000) instead of a random one. Normally, stack canaries are randomized at runtime to prevent attackers from guessing them during buffer overflow attacks. However,...