Beyond Fuzzing : Exploit Automation with PMCMA - Archive ouverte HAL
Rapport Année : 2011

Beyond Fuzzing : Exploit Automation with PMCMA

Jonathan Brossard

Résumé

PMCMA stands for Post Memory Corruption Memory Analysis. In a nutshell, it is a new type of ptrace() based debugger we presented at the latest Blackhat US Conference. PMCMA is free software. It is available at http://www.pmcma.org/ under the Apache 2.0 license. Unlike standards debuggers, build by software maintainers to help manually fix software, PMCMA is an offensive one, designed with automation and exploitation in mind. The core novelty of PMCMA is to allow a debugged process to be replicated at will in memory by forcing it to fork. By creating many replicas of the same process, it allows for easy empirical automation and manipulation. For instance, it can be used to overwrite sequentially all writable sections of memory with a remarkable value after a memory corruption bug has occurred inside the address space, and artificially continue execution. This is the best known way to determine all the function pointers actually called within a binary path. Without the need of lengthy single stepping. And fully automatically.
Fichier principal
Vignette du fichier
Jonathan_Brossard_HITB-Ezine_2011.pdf (833.26 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence

Dates et versions

hal-04676819 , version 1 (24-08-2024)

Licence

Identifiants

  • HAL Id : hal-04676819 , version 1

Citer

Jonathan Brossard. Beyond Fuzzing : Exploit Automation with PMCMA. HITB. 2011. ⟨hal-04676819⟩

Collections

LARA
23 Consultations
10 Téléchargements

Partager

More