Changing and Unchanged Things in Vulnerability Research

Explore the evolving landscape of vulnerability research in this keynote address from OffensiveCon23. Delve into the origins and motivations behind vulnerability research, examining both changing and unchanged aspects of the field. Learn about buffer overflow bugs, program analysis tools, and improved security strategies. Discover advanced fuzzing techniques and analyze real-world case studies, including CVE-2021-30737. Examine exploit mitigations, secure architectures, and 1-click attack steps. Investigate specific cases involving KPP, PAC in kernel and userland, and PPL. Gain insights into the offensive and defensive game of cybersecurity and ponder the future of vulnerability research. Review the Blackbird exploit, including its exploitation techniques and loading of SEPOS. Conclude with key takeaways to enhance your understanding of modern vulnerability research and exploitation techniques.