Flag: Tornado! Hurricane!

Blogs >> pedram's Blog

Created: Monday, January 16 2006 11:31.22 CST Modified: Tuesday, January 17 2006 19:01.56 CST
Printer Friendly ...
ShmooCon 2006
Author: pedram # Views: 2573

Recently got back from the very enjoyable ShmooCon 2006. I really like the setting and crowd of this con. Got to catch up with some OpenRCE regulars / admins including Chris Eagle, Peter Silberman, Joe Stewart, Greg Hoglund, Jamie Butler and the like.

Of the various talks I caught I especially enjoyed Adrian Marinescu's on the security / performance enhancements of the Windows Vista Heap. Adrian is a Microsoft Windows kernel group development lead. It's an interesting move to me that Microsoft would proactively share such low level information. A smart move in my opinion as if they don't, someone (like Matt Conover & Oded Horovitz) will at some point anyway. I was especially impressed by the fact that Adrian credited Conover for learning a new windows heap exploit vector from him (the Lookaside technique, which has since been resolved).

For those of you who caught Chris Eagle and I's BoF on reverse engineering. The (brief) slide-set we used is available here:

ShmooCon 2005 Amini-Eagle.pdf

Many thanks to Dan Moniz and Greg Hoglund for their active participation and help "breaking the ice".




Add New Comment
Comment:









Active in Last 5 Minutes
blindmatrix

There are 31,272 total registered users.


Recently Created Topics
Reverse Engineering ...
Jul/06
hi!
Jul/01
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit