Shortly after Microsoft’s release of Windows 8 Developer Preview, I read an article mentioning the mechanism to prevent ROP (Return Oriented Programming) on Windows 8 and the way to bypass it. Accordingly, I have experimented and provided a ROP chain which could be used for any ROP exploit codes on Windows 8. Let’s talk about […]
I assume you know Microsoft released Windows 8 Developer Preview.1) The UserAssist registry keys still exist, and still use ROT13 encoding:Notice that there are also entries for the launching of Metro apps (e.g. alarms).But there are also a couple of extra keys, I’ll analyze them when more definitive versions of Windows 8 are released:2) My […]
When Microsoft unveiled the Developer Preview of Windows 8 two weeks ago one of the items to get the most attention was it’s included unmanaged anti-virus solution. I was interested in what capabilities it might have and how it would present itself to users who stumble across something malicious. Naturally I installed it on a […]
Latest Comments