ROP Mitigations Bypassed
ROP Mitigations Bypassed
Written by Andrew Johnson   
Monday, 13 August 2012

Whenever you improve your security fence, the dedicated intruder will find another way in. This has already happened to the latest release of Microsoft's anti-hacking toolkit, thereby defeating the ROPGuard protection that won a $50,000 prize.

Microsoft's BlueHat Prize for defenses against attacks on memory vulnerabilities was organized in conjunction with the annual BlackHat conference. The three prize winners all suggested solutions to counter ROP attacks and even before the prizes had been presented one of these had been put to work in a free tool that Microsoft makes available to sys admins.

Microsoft's General Manager for Trustworthy Computing Security, Matt Thomlinson, announced the latest version of its Enhanced Mitigation Experience Toolkit (EMET 5.3) on July 25 stating:

I’m excited to announce that we’ve already been able to incorporate one of these winning technologies into our free Enhanced Mitigation Experience Toolkit (EMET) 3.5 technology preview. The new Tech Preview of EMET offers four new checks based on Ivan Fratric’s ROP exploit mitigation to help prevent attacks utilizing ROP techniques.


rop

 

It took barely two weeks before a security researcher announced on his new REP RET blog that he had bypassed these new ROP Mitigations. Here is the You Tube video that demonstrate the exploit:

 

More details, including the asm code and the Kernelbase method used for a second exploit, can be found via the blog post.

More Information

Bypassing EMET 3.5's ROP Mitigation

Related Articles

BlueHat Prizes Awarded

 

 
 

 

blog comments powered by Disqus

 

To be informed about new articles on I Programmer, install the I Programmer Toolbar, subscribe to the RSS feed, follow us on, Twitter, Facebook, Google+ or Linkedin,  or sign up for our weekly newsletter.

 

Banner


Microsoft Open Sources Drone Simulator
17/02/2017

An open source simulator that you can use to crash-test drones and robots has been released by Microsoft. The simulator can be used to test the devices virtually rather than wrecking them in the real  [ ... ]



//No Comment - Kinect for X-Rays, Kinect as a Baby Monitor & Full Body Motion Tracking With HoloLens
20/01/2017

The whole subject of depth cameras has more or less dropped out of sight. The Kinect in particular has been declared dead more than once recently, but this is simply a reflection of how high the  [ ... ]


More News

Last Updated ( Monday, 13 August 2012 )
 
 

   
Banner
RSS feed of news items only
I Programmer News
Copyright © 2017 i-programmer.info. All Rights Reserved.
Joomla! is Free Software released under the GNU/GPL License.