Aggregator

CVE-2015-2546 UAF Analysis and Exploit

小刀志
4 years 9 months ago
This article will analyze a UAF vulnerability in win32k Window Manager (User) Subsystem in Windows: CVE-2015-2546. Similar to CVE-2017-0263 analyzed in the previous article, this vulnerability is use-after-free of popup menu tagPOPUPMENU object as well. The analyzing environment is Windows 7 x86 SP1 basic virtual machine.
稻草小刀

CVE-2015-2546 UAF Analysis and Exploit

小刀志
4 years 9 months ago
This article will analyze a UAF vulnerability in win32k Window Manager (User) Subsystem in Windows: CVE-2015-2546. Similar to CVE-2017-0263 analyzed in the previous article, this vulnerability is use-after-free of popup menu tagPOPUPMENU object as well. The analyzing environment is Windows 7 x86 SP1...
稻草小刀

Google 是如何落地静态代码分析的

RedTeam
4 years 9 months ago
本篇文章为我在读 Google 落地静态代码分析的 Paper 时做的笔记，以及一些我自己的观点，主要聊一聊甲方安全建设中落地静态代码分析平台的一些痛点，以及相应的解决方案。

Managed ad