Mind-Controlling Other Applications: An intro to intra-process hacking

AppSec Village welcomes all travelers to choose from talks by expert community members, an all AppSec-focused CTF, contests that challenge your mind and your skillz, and more. Bring your thirst for knowledge and passion for breaking things, and your visit to AppSec Village will be a thrill!

AppSec Village

AppSec Village @ DEFCON WORKSHOP (DEFCON BADGE REQUIRED)

Las Vegas Convention Center, West Hall, Level 2, Rooms 228-230

To make sure more villagers get to attend our awesome AppSec Village workshop. Please limit yourself to no more than two workshops out of the five we offer. We will randomly cancel registrations of registrants going over this limit. Thank you for making it fun for everyone!If you see that you won't arrive at the workshop, please cancel. Someone on the waiting list will really appreciate it!----- <ul><li>Must have a valid DEFCON badge to attend.</li><li>Must be present for event 10 min before scheduled beginning time.</li><li>Participants must agree to AppSec Village &amp; DEFCON Codes of Conduct.</li><li>Participants may need basic C/C++ skills and a Windows or VM computer with Microsoft Visual Studio 2022 Community Edition configured for C/C++ development.</li><li>Even if it is not required for the workshop, it is also recommended to download/configure a copy of the Ghidra software reverse engineering suite (ghidra-sre.org).</li></ul> Learn from the ground up how to take over the execution of another process and make it do your bidding! This workshop teaches you the basic to intermediate levels of runtime intra-process hacking on Windows and POSIX systems covering injecting code into another process on windows (and an overview of how this could be done on a POSIX system), locating specific code within an application in a update resistant manner, hooking and redirecting code execution using several techniques, abusing error handlers to disguise code and an overview of mitigation strategies to protect apps from intra-process hacking. ILOVEPIEOpen Source Software Engineer and Cybersecurity Researcher Ever since I found the only 3 books on programming in my elementary school's library I've been captivated by the logical and mathematical problems presented by the field of Computer Science and how the solutions to those problems can go wrong and be exploited. In high-school I discovered a zero day Denial Of Service exploit in all implementations of the Minecraft server at that time. I promptly proceeded to crash, what was at the time, the largest Minecraft server in the world (with permission). From there my interests drifted more towards cybersecurity, particularly with regards to video games. I wrote a tool to dump and partially deobfuscate the RuneScape client while it was loading and have also written proof-of-concept hacks for several games and multiple game-server emulators. I am currently a maintainer for opentypejs/opentype.js (a font library in pure JS) and SABRE-JS/SABRE.js (a GPU accelerated subtitle renderer for the most advanced subtitle format in the world). <a href="https://appsecvillage.com/events/dc-2024/mind-controlling-other-applications-an-intro-to-intra-process-hacking-699930" title="https://appsecvillage.com/events/dc-2024/mind-controlling-other-applications-an-intro-to-intra-process-hacking-699930" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">https://appsecvillage.com/events/dc-2024/mind-controlling-other-applications-an-intro-to-intra-process-hacking-699930</a>

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

Mind-Controlling Other Applications: An intro to intra-process hacking

More events from AppSec Village

Discover more events from AppSec Village, from Science & Tech to other experiences you might love.

Still looking for the right event?

Explore all events in Las Vegas and filter by date, category, and more to find the perfect fit.

Mind-Controlling Other Applications: An intro to intra-process hacking

More events from AppSec Village

Discover more events from AppSec Village, from Science & Tech to other experiences you might love.

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all events in Las Vegas and filter by date, category, and more to find the perfect fit.