Explore a novel code injection technique called Dirty Vanity in this 38-minute Black Hat conference talk. Delve into the lesser-known forking mechanism built into Windows operating systems and learn how it can be exploited to challenge current injection detection and prevention methods. Discover how this technique opens up a wider spectrum of attacks that test common concepts of EDR TTPs. Examine the forking mechanism's internals and common activation methods. Gain insights into this innovative approach to code injection and its potential implications for cybersecurity professionals and researchers.
Dirty Vanity - A New Approach to Code Injection & EDR Bypass
Overview
Syllabus
Dirty Vanity: A New Approach to Code Injection & EDR Bypass
Taught by
Black Hat
Related Courses
-
Dirty Bin Cache - A New Code Injection Poisoning Binary Translation Cache
-
Jack-in-the-Cache - A New Code Injection Technique through Modifying X86-to-ARM Translation Cache
-
AMSI Unchained - Review of Known AMSI Bypass Techniques and Introducing a New One
-
Injection on Steroids - Code Less Code Injections and 0 Day Techniques
-
A New Method to Bypass 64-bit Linux ASLR
-
AtomBombing - Injecting Code Using Windows’ Atoms
