Exploiting the Hard-Working DWARF: Trojan and Exploit Techniques with No Native Executable Code
Exploiting the Hard-Working DWARF: Trojan and Exploit Techniques with No Native Executable Code
复制标题
利用勤奋的 DWARF：没有本机可执行代码的木马和利用技术
DOI：
--
复制
发表时间：
2011
期刊：
影响因子：
--
通讯作者：
S. Bratus
中科院分区：
文献类型：
--
作者：
James Oakley;S. Bratus
对漏洞和利用的研究是发现影响计算流的机制和寻找执行意外计算的新方法的一种。在本文中，我们展示了异常处理机制的实现和使用的GCC可以用来控制程序执行的程度。我们表明，用于存储异常处理信息的数据结构，在类UNIX系统实际上包含图灵完整的字节码，这是由一个虚拟机执行的过程中的异常展开和处理。我们讨论了恶意攻击者如何获得对这些结构的控制，以及一旦控制已经实现，这样的攻击者如何利用它们。
The study of vulnerabilities and exploitation is one of finding mechanisms affecting the flow of computation and of finding new means to perform unexpected computation. In this paper we show the extent to which exception handling mechanisms as implemented and used by gcc can be used to control program execution. We show that the data structures used to store exception handling information on UNIX-like systems actually contain Turing-complete bytecode, which is executed by a virtual machine during the course of exception unwinding and handling. We discuss how a malicious attacker could gain control over these structures and how such an attacker could utilize them once control has been achieved.