Master new exploit techniques for Microsoft RDP, Java remote protocols, and more at Black Hat Europe in London next month.
We're less than a month away from Black Hat Europe's return to London, and when this premier cybersecurity event kicks off at The Excel attendees can look forward to a slew of cutting-edge Briefings on the art and inside workings of exploit development.
Fuzzing and Exploiting Virtual Channels in Microsoft Remote Desktop Protocol for Fun and Profit is a great example; this 50-minute Briefing will bring you a group of security experts walking you through their adventures in applying coverage-based fuzzing to Microsoft's RDP (Remote Desktop Protocol) client - specifically, virtual channels in RDP.
In addition to sharing the construction of the fuzzer and demonstrating the exploitation, these experts will also discuss the heap memory management technique (RDP Heap Feng Shui) which is a prerequisite for exploiting heap overflow vulnerability in the RDP client.
If Java is more your speed check out Far Sides of Java Remote Protocols, which promises to guide you through Java Remote Method Invocation (RMI) and Common Object Request Broker Architecture (CORBA) while revealing several critical flaws under the hood and showing how vendors are failing at securing their implementations of them.
And in Doors of Durin: The Veiled Gate to Siemens S7 Silicon you'll see how the Siemens S7-1200 PLC bootloader has a "special access feature" that can be exploited to attack Siemens' S7 PLC series, which is widely used - especially for industrial automation.
On a positive note, once discovered by the asset owner this feature can also be used for good, e.g., as a forensic interface for Siemens PLCs, and this talk will be accompanied by a demo of researchers' findings. Don't miss it!
Get more information on these and lots of other cutting-edge content in the Briefings schedule for Black Hat Europe, which returns to The Excel in London December 2-5, 2019.
For more information on what's happening at the event and how to register, check out the Black Hat website.