OpenRCE

About Articles Book Store Distributed RCE Downloads Event Calendar Forums Live Discussion Reference Library RSS Feeds Search Users What's New

Customize Theme

Flag: Tornado! Hurricane!

Created: Monday, January 16 2006 11:31.22 CST

Modified: Tuesday, January 17 2006 19:01.56 CST

Printer Friendly ...

ShmooCon 2006

Author: pedram

# Views: 2773

Recently got back from the very enjoyable ShmooCon 2006. I really like the setting and crowd of this con. Got to catch up with some OpenRCE regulars / admins including Chris Eagle, Peter Silberman, Joe Stewart, Greg Hoglund, Jamie Butler and the like.

Of the various talks I caught I especially enjoyed Adrian Marinescu's on the security / performance enhancements of the Windows Vista Heap. Adrian is a Microsoft Windows kernel group development lead. It's an interesting move to me that Microsoft would proactively share such low level information. A smart move in my opinion as if they don't, someone (like Matt Conover & Oded Horovitz) will at some point anyway. I was especially impressed by the fact that Adrian credited Conover for learning a new windows heap exploit vector from him (the Lookaside technique, which has since been resolved).

For those of you who caught Chris Eagle and I's BoF on reverse engineering. The (brief) slide-set we used is available here:

ShmooCon 2005 Amini-Eagle.pdf

Many thanks to Dan Moniz and Greg Hoglund for their active participation and help "breaking the ice".

There are 31,319 total registered users.

Recently Created Topics
[help] Unpacking VMP...	Mar/12
Reverse Engineering ...	Jul/06
hi!	Jul/01
let 'IDAPython' impo...	Sep/24
set 'IDAPython' as t...	Sep/24
GuessType return une...	Sep/20
About retrieving the...	Sep/07
How to find specific...	Aug/15
How to get data depe...	Jul/07
Identify RVA data in...	May/06

Recent Forum Posts
Finding the procedur...	rolEYder
Question about debbu...	rolEYder
Identify RVA data in...	sohlow
let 'IDAPython' impo...	sohlow
How to find specific...	hackgreti
Problem with ollydbg	sh3dow
How can I write olly...	sh3dow
New LoadMAP plugin v...	mefisto...
Intel pin in loaded ...	djnemo
OOP_RE tool available?	Bl4ckm4n

Recent Blog Entries
	halsten	Mar/14
Breaking IonCUBE VM
	oleavr	Oct/24
Anatomy of a code tracer
	hasherezade	Sep/24
IAT Patcher - new tool for ...
	oleavr	Aug/27
CryptoShark: code tracer ba...
	oleavr	Jun/25
Build a debugger in 5 minutes
More ...

Recent Blog Comments
	nieo on:	Mar/22
IAT Patcher - new tool for ...
	djnemo on:	Nov/17
Kernel debugger vs user mod...
	acel on:	Nov/14
Kernel debugger vs user mod...
	pedram on:	Dec/21
frida.github.io: scriptable...
	capadleman on:	Jun/19
Using NtCreateThreadEx for ...
More ...

Imagery

SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit