About
Articles
Book Store
Distributed RCE
Downloads
Event Calendar
Forums
Live Discussion
Reference Library
RSS Feeds
Search
Users
What's New
Customize Theme
bluegrey
blackgreen
metal
simple
Flag:
Tornado!
Hurricane!
Login:
Password:
Remember Me
Register
Blogs
>>
pedram
's Blog
Created: Monday, January 16 2006 11:31.22 CST
Modified: Tuesday, January 17 2006 19:01.56 CST
Printer Friendly ...
ShmooCon 2006
Author:
pedram
# Views:
2773
Recently got back from the very enjoyable ShmooCon 2006. I really like the setting and crowd of this con. Got to catch up with some OpenRCE regulars / admins including Chris Eagle, Peter Silberman, Joe Stewart, Greg Hoglund, Jamie Butler and the like.
Of the various talks I caught I especially enjoyed Adrian Marinescu's on the security / performance enhancements of the Windows Vista Heap. Adrian is a Microsoft Windows kernel group development lead. It's an interesting move to me that Microsoft would proactively share such low level information. A smart move in my opinion as if they don't, someone (like Matt Conover & Oded Horovitz) will at some point anyway. I was especially impressed by the fact that Adrian credited Conover for learning a new windows heap exploit vector from him (the Lookaside technique, which has since been resolved).
For those of you who caught Chris Eagle and I's BoF on reverse engineering. The (brief) slide-set we used is available here:
ShmooCon 2005 Amini-Eagle.pdf
Many thanks to Dan Moniz and Greg Hoglund for their active participation and help "breaking the ice".
Add New Comment
Comment:
There are
31,319
total registered users.
Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
hi!
Jul/01
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n
Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM
oleavr
Oct/24
Anatomy of a code tracer
hasherezade
Sep/24
IAT Patcher - new tool for ...
oleavr
Aug/27
CryptoShark: code tracer ba...
oleavr
Jun/25
Build a debugger in 5 minutes
More ...
Recent Blog Comments
nieo
on:
Mar/22
IAT Patcher - new tool for ...
djnemo
on:
Nov/17
Kernel debugger vs user mod...
acel
on:
Nov/14
Kernel debugger vs user mod...
pedram
on:
Dec/21
frida.github.io: scriptable...
capadleman
on:
Jun/19
Using NtCreateThreadEx for ...
More ...
Imagery
SoySauce Blueprint
Jun 6, 2008
[+] expand
View Gallery
(11) /
Submit