Finding Vulnerabilities through Static Analysis and Scripting
summary
Walks through a reverse‑engineering build environment and live demos that actually find and analyze real bugs: uses IDA Pro/Hex‑Rays and Ghidra for disassembly and decompilation, IDAPython/SARK and PyCharm for scripting, Frida for runtime hooking, WinDbg and Winbindex for patch diffing. Shows a real case chain—DNS SIGRed driven by a memcpy integer overflow that becomes a heap overflow—and demonstrates exploit mitigations like Stack Pivot Protection/EMET/Exploit Guard blocking a calculator pop‑shell, explaining what must be bypassed to weaponize a patch diff.
AI-written summary · about
chapters (9)
- 0:00Introduction to bug hunting
- 3:47Vulnerability research lifecycle
- 7:49Exploit mitigations
- 11:26Market dynamics of exploits
- 12:36Essential research tools
- 20:48Binary diffing techniques
- 22:05Getting started in hunting
- 24:30Stack pivot analysis
- 34:01Case studies and conclusion
related talks
01h 06mHow hacking works
01h 27mProactive Defense: Leveraging Hacker Tools for Early Vulnerability Detection
51mThe Anatomy of an Exploit
05mWhy Can't Johnny Fix Vulnerabilities: A Usability Evaluation of Static Analysis Tools
38mHackers Gonna Hack: Identifying and Fixing Vulnerabilities Proactively
01h 03m“Secure Coding Best Practices: Your First Line Is The Last Line Of Defense (2 of 2)”
57mThe Anatomy of an Exploit
39mNight of the living vulnerabilities