~/talk

Hacking .NET(C#) Applications: The Black Arts (ASM attacks)

Talkat OWASP AppSecUSA 2014 · 2014-09-16..09-19· [security, dotnet]
name:Jon McCoy
links:none on file
slides:none on file

Claims a toolkit that edits .NET apps on disk and live in memory, swapping IL on disk and overwriting JIT'd machine code to change behavior; demonstrates Greywolf for IL patching, GrayDragon for injecting DLLs into other processes, and loading raw Metasploit payloads into runtime functions by creating delegates and writing bytes with Marshal.Copy. Shows how privates become accessible, Visual Studio user‑control constructors can trigger execution, and gives concrete counts (e.g. 15 source lines → ~34 IL → ~77 assembly) and free tools to reproduce.

AI-written summary · about

  1. 0:00Start
  2. 1:46Cross Platform Next Step From C++/JAVA
  3. 5:10HOW MUCH CODE DO YOU NEED TO READ
  4. 25:39Basics of ASM in .NET Demo
  5. 39:30What is the security?
  6. 45:28Jon McCoy
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.