Pig in a Poke: Automatically Detecting and Exploiting Link Following...
summary
Prototype LinkZard automatically detects and exploits Windows link-following flaws using an exploration phase with IPC-driven inputs and file state fuzzing to infer constraints and an file operation primitive graph for subgraph matching. The authors reproduce 42 historical LFVulns, scan 120 closed-source programs, find 55 zero-days with 49 confirmed and patched and 15 CVEs, report a 19.48% detection recall and about 86.8% exploitation success rate.
AI-written summary · about
chapters (9)
- 0:00Link following vulnerabilities
- 1:57Arbitrary file delete vulnerability
- 3:47Root causes and prevalence
- 5:59Challenges in detection
- 7:05Linkard system design
- 9:16File state fuzzing
- 10:22FOPG construction
- 11:25Performance and results
- 13:11Conclusion
related talks
56m"Easy LPEs and Common Software Vulnerabilities"
29mBuilding a Hackbot: How Ethiack's Hackian Finds Real Vulnerabilities
51mThe Anatomy of an Exploit
01h 05mClassic Vulnerabilities
31mA Chain Is No Stronger Than Its Weakest LNK
35m0-day In-the-Wild Exploitation in 2022...so far.
26mWhen Models Write Malware: Defending Against On-demand Exploits
42mCPU Fuzzing: Automatic Discovery of...