Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
古典的なStack Overflow から JIT-ROPまで
Search
@tkmru
December 15, 2016
Programming
1
330
古典的なStack Overflow から JIT-ROPまで
ゼミにて
@tkmru
December 15, 2016
Tweet
Share
More Decks by @tkmru
See All by @tkmru
ipa-medit: Memory search and patch tool for IPA without Jailbreaking/ipa-medit-bh2022-europe
tkmru
0
270
Ipa-medit: Memory modification tool for iOS apps without Jailbreaking/ipa-medit-codeblue2022
tkmru
0
140
趣味と実益のための著名なOSSライブラリ起因の脆弱性の探求/seccamp2021-b5
tkmru
0
4.8k
Ipa-medit: Memory Search and Patch Tool for IPA Without Jailbreaking @Black Hat USA 2021 Arsenal/ipa-medit-bh2021-usa
tkmru
1
4.2k
Learn the essential way of thinking about vulnerabilities through post-exploitation on middlewares (MySQL/PostgreSQL編)/seccamp2020-b8
tkmru
3
820
apk-medit: memory search and patch tool for debuggable APK @CODE BLUE 2020 Bluebox
tkmru
0
190
apk-medit: memory search and patch tool for debuggable APK @Black Hat USA 2020 Arsenal/apk-medit-bh2020-usa
tkmru
0
4k
めんどうくさいゲームセキュリティ
tkmru
20
10k
Linux Rootkit Internals
tkmru
1
1.9k
Other Decks in Programming
See All in Programming
qmuntal/stateless のススメ
sgash708
0
120
Progressive Web Apps für Desktop und Mobile mit Angular (Hands-on)
christianliebel
PRO
0
110
GitHub Actionsのキャッシュと手を挙げることの大切さとそれに必要なこと
satoshi256kbyte
5
390
CSC305 Lecture 13
javiergs
PRO
0
130
カスタムしながら理解するGraphQL Connection
yanagii
1
1.2k
Importmapを使ったJavaScriptの 読み込みとブラウザアドオンの影響
swamp09
4
1.3k
Server Driven Compose With Firebase
skydoves
0
400
【Kaigi on Rails 2024】YOUTRUST スポンサーLT
krpk1900
1
250
とにかくAWS GameDay!AWSは世界の共通言語! / Anyway, AWS GameDay! AWS is the world's lingua franca!
seike460
PRO
1
560
詳細解説! ArrayListの仕組みと実装
yujisoftware
0
480
シールドクラスをはじめよう / Getting Started with Sealed Classes
mackey0225
3
400
ECSのサービス間通信 4つの方法を比較する 〜Canary,Blue/Greenも添えて〜
tkikuc
11
2.3k
Featured
See All Featured
For a Future-Friendly Web
brad_frost
175
9.4k
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
smashingmag
250
21k
How STYLIGHT went responsive
nonsquared
95
5.2k
Navigating Team Friction
lara
183
14k
Statistics for Hackers
jakevdp
796
220k
Fireside Chat
paigeccino
32
3k
BBQ
matthewcrist
85
9.3k
Java REST API Framework Comparison - PWX 2021
mraible
PRO
28
7.9k
Building Adaptive Systems
keathley
38
2.2k
Testing 201, or: Great Expectations
jmmastey
38
7k
Stop Working from a Prison Cell
hatefulcrawdad
267
20k
Keith and Marios Guide to Fast Websites
keithpitt
408
22k
Transcript
ݹయతͳ4UBDL0WFSqPX ͔Β +*5301·Ͱ θϛ !ULNSV
ؔݺͼग़࣌͠ͷελοΫ w DBMMGVODUJPOOBNF w ΞηϯϒϦͰDBMM໋ྩͰ͕ؔ͋ΔΞυϨεʹඈͿ w ͦͷࡍɺΓઌͷΞυϨεΛϦλʔϯΞυϨεͱͯ͠ ελοΫʹஔ͘ w ؔΛ࣮ߦ͠ऴ͑ΔͱSFU໋ྩͰϦλʔϯΞυϨεʹΔ
w DBMMGVODUJPOOBNFΛ࣮ߦͨ͠ͱ͖ͷ ɹɹɹɹɹɹɹɹɹɹɹɹɹελοΫͷ༷ࢠ ม ม ϦλʔϯΞυϨε
PWFSqPX͢Δίʔυྫ w ಡΈࠐΈαΠζΛνΣοΫ͠ͳ͍ؔΛ͍ͬͯΔͱ PWFSqPXͷݪҼͱͳΔ w FY TUSDQZ HFUT
4UBDL0WFSqPX w PWFSqPXͤ͞ɺ࣮ߦ͍ͨ͠ίʔυΛελοΫʹॻ͖ࠐΉ w ͦͷࡍɺϦλʔϯΞυϨεΛ࣮ߦ͍ͨ͠ίʔυ͕͋Δ ΞυϨεʹॻ͖͑Δ w ॻ͖͑ΒΕͨΞυϨεʹ͋Δίʔυ͕࣮ߦ͞ΕΔ CVG<> PME
ϦλʔϯΞυϨε BBBB BBBB BBBB BBBB Y PWFSqPX͢ΔલͷελοΫͷ༷ࢠ PWFSqPXͨ͠ޙͷελοΫͷ༷ࢠ
ରࡦͷҰྫ w $16ͷ/9CJU /PF9FDVUFCJU w ελοΫʹ࣮ߦͰ͖ͳ͍ྖҬΛ࡞Δ w ࣮ྫʣ-JOVY&YFD4IJFMEɺ8JO%&1 w
PWFSqPXʹΑΓελοΫ্ʹ߈ܸίʔυΛஔ͞Εͯ ελοΫ্ͷίʔυ࣮ߦͰ͖ͳ͍
301 w 3FUVSO0SJFOUFE1SPHSBNNJOH w /9CJU༗ޮԼͰTUBDL্ͷίʔυΛ࣮ߦͰ͖ͳ͍ w ͔͠͠ɺ࣮ߦՄೳͳྖҬ FYϥΠϒϥϦ ͋Δ w
࣮ߦՄೳͳྖҬͷதͰ͑ͦ͏ͳίʔυΛ அยతʹݺͼग़͢͜ͱͰҙͷಈ࡞Λͤ͞Δ͜ͱ͕ Ͱ͖Δ
w 301Ͱར༻͢Δஅยతͳίʔυͷ͜ͱΛ301HBEHFUͱ ݺͿ w SFU໋ྩ͕ޙΖʹ͍͍ͭͯΔίʔυ w FY QPQSEJSFU w SFU໋ྩΛ࣮ߦ͠Ϧλʔϯ͢ΔஅยతͳίʔυΛ
ෳݺͿ͜ͱͰతͷಈ࡞Λୡ͢Δ͜ͱ͔Β 3FUVSO0SJFOUFE1SPHSBNNJOHͱ໊͚ΒΕͨ 301
FYQMPJUͷྫ w ϦλʔϯΞυϨεΛҎԼͷॱͰॻ͖͑Δ w TZTUFN lCJOTIz Λ࣮ߦ͠γΣϧΛىಈ w QPQSEJSFUͷΞυϨεҾΛηοτ͢Δ w
ελοΫʹCJOTIͷΞυϨεΛੵΜͰ͓͘ w DBMMTZTUFN ͷΞυϨεTZTUFN ΛݺͿ
301ͷσϞ
ରࡦͷҰྫ w "4-3 "EESFTT4QBDF-BZPVU3BOEPNJ[BUJPO w ΞυϨεۭؒஔΛϥϯμϜʹ͢Δ w ελοΫɺώʔϓɺσʔλྖҬͷΞυϨε͕ϥϯμϜʹ w
ܾΊଧͪͰΞυϨεΛࢦఆ͢Δ߈ܸΛແޮԽͰ͖Δ
"4-3 -JOVY ͷ w (05ͷΞυϨε͕ݻఆͷ·· w (05 (MPCBM0⒎TFU5BCMF w
γϯϘϧ ؔ ͷϙΠϯλͷྻ w ؔͷΞυϨεΛղܾ͢ΔͨΊͷྖҬ
+*5301 w +VTU*O5JNF301 w (05ʹొ͞Ε͍ͯΔؔΛͬͯɺ࣮ߦதʹ ࣮ߦՄೳྖҬΛಡΈऔΔ w ಡΈऔͬͨྖҬʹ͋Δ301HBEHFUΛ͏ w ΞυϨε͕ϥϯμϜԽ͞Εͨ͋ͱʹಡΈऔΔ͜ͱͰɹ
"4-3Λճආ
+*5301ͷରࡦ w ͍Ζ͍Ζจ͕ग़͍ͯΔ͕ɺ࣮ࡍʹ04ίϯύΠϥʹ࣮ ͞Εͨͷݱ࣌Ͱͳ͍ɻ w ࠓޙɺࢹ͍͖͍ͯͨ͠
ࢀߟจݙ w "OUJ301ࡇΓͩͥʂ64&/*94FDVSJUZ301 3FUVSOPGUIFFEJZV[VIBSBͷه IUUQZV[VIBSBIBUFOBCMPHKQFOUSZ w +*5301؇ख๏)FJTFOCZUFʹ͍ͭͯ·ͱΊͯΈΔ ͍ΖςΫϊϩδʔIUUQJOB[IBUFOBCMPHDPN FOUSZ