Beyond Fuzzing : Exploit Automation with PMCMA
Résumé
PMCMA stands for Post Memory Corruption Memory
Analysis. In a nutshell, it is a new type of ptrace() based
debugger we presented at the latest Blackhat US
Conference. PMCMA is free software. It is available at
http://www.pmcma.org/ under the Apache 2.0 license.
Unlike standards debuggers, build by software maintainers
to help manually fix software, PMCMA is an offensive one,
designed with automation and exploitation in mind.
The core novelty of PMCMA is to allow a debugged
process to be replicated at will in memory by forcing it
to fork. By creating many replicas of the same process, it
allows for easy empirical automation and manipulation.
For instance, it can be used to overwrite sequentially all
writable sections of memory with a remarkable value
after a memory corruption bug has occurred inside
the address space, and artificially continue execution.
This is the best known way to determine all the
function pointers actually called within a binary path.
Without the need of lengthy single stepping. And fully
automatically.
Domaines
Cryptographie et sécurité [cs.CR]Origine | Fichiers produits par l'(les) auteur(s) |
---|---|
Licence |