Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Windows 8 Heap Intervals

Black Hat via YouTube

Overview

Limited-Time Offer: Up to 75% Off Coursera Plus!
7000+ certificate courses from Google, Microsoft, IBM, and many more.
This course delves into Windows 8 heap intervals, focusing on the transition of heap exploitation mitigations from Windows 7 to Windows 8. The learning outcomes include understanding the inner workings of the Windows memory manager, heap-related security features in Windows 8, and tips for achieving high levels of heap determinism. The course teaches skills such as analyzing back-end and front-end mitigations, pool types, kernel pool attacks, safe unlinking, cache-aligned allocations, and block size attacks. The teaching method involves in-depth exploration of heap exploitation techniques in both user-land and kernel-land perspectives. This course is intended for cybersecurity professionals, particularly those interested in memory management and heap exploitation on Windows operating systems.

Syllabus

Intro
Windows 8 Back-end (cont.)
Back-end Mitigation II
Windows 8 Randomization
Windows 8 Front-End Allocation III UserBlocks
Win 7 vs Win 8 Allocation
Windows 8 Front-End Mitigation III
Windows Front-End Mitigation IV
Bitmap Flipping 2.0
_HEAP_USERDATA_HEADER Attack
Pool Types
Pool Header
Windows 8 Kernel Pool
NX Pool Descriptor
Kernel Pool Cookie
Windows 8 Pool Cookie Initialization
Boot Entropy
Process Pointer Attack
Process Pointer Encoding
Lookaside Pointer Attacks
Lookaside Pointer Encoding
Cache Aligned Allocations
Cache Aligned Allocation Cookie
Safe Unlinking
Safe (Un)linking in Windows 8
Poolindex Attack
Summary
Block Size Attacks
BlockSize/Previous Size
BlockSize Attack Steps
Split Chunk Pool Allocation
Split Fragment Attack Steps
Determinism
User Land Closing Notes
Kernel Pool Closing Notes

Taught by

Black Hat

Reviews

Start your review of Windows 8 Heap Intervals

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.