Explore the security vulnerabilities in Windows Component Object Model (COM) and Windows Runtime (WinRT) services in this 27-minute Black Hat conference talk. Dive into the extensive attack surfaces these widely-used technologies provide for hackers seeking Local Privilege Escalation (LPE), Remote Code Execution (RCE), and Sandbox Escape vulnerabilities. Learn from security researchers XueFeng Li and Zhiniang Peng as they discuss their findings of over 100 bugs in COM/WinRT services discovered within a year. Gain insights into cross-process communication vulnerabilities and potential security risks in UWP applications. Access the full abstract and presentation materials for a comprehensive understanding of exploiting Windows COM/WinRT services.
Overview
Syllabus
Exploiting Windows COM/WinRT ServicesExploiting Windows COM/WinRT Services
Taught by
Black Hat
Related Courses
-
The Complete Pentesting and Privilege Escalation Course
-
Diving Into Spooler - Discovering LPE and RCE Vulnerabilities in Windows Printer
-
Hardening Windows 8 Apps for the Windows Store
-
The Rise of Potatoes - Privilege Escalations in Windows Services
-
The Subway Line 8 - Exploitation of Windows 8 Metro Style Apps
-
Crashing Your Way to Medium-IL - Exploiting the PDB Parser for Privilege Escalation
