Loading…
CanSecWest 2022 has ended
Back To Schedule
Friday, May 20 • 14:15 - 15:15
PWN Windows: From Low to System Privilege via RASMAN Service

Log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.
Windows is an operating system with a long history, which also means that it has a lot of codes that have been used for many years. These codes may not be fully considered for their security when they are written. I found an attack surface called rasman (remote access connection manager) that has been hidden for a long time, at least since the windows nt4 version has existed.

In this talk, I will introduce the architecture of this module in detail, and introduce how I can find 10+ vulnerabilities in this module in a short period of time. Finally, I will introduce two vulnerabilities which bypasses all current mitigations, and won the windows EOP project in Tianfu cup 2021

Speakers
ZZ

Ziming Zhang

Researcher, Ant Security Light-Year Lab
Security researcher of Ant Security Light-Year LabWorking on virtualization security and kernel security2021 Tianfu Cup Windows project winner2021 Q2 Microsoft Most Valuable Security Researchers2020 Tianfu Cup paralles desktop project winnerBefore, I researched vulnerabilities related... Read More →

Friday May 20, 2022 14:15 - 15:15 PDT
Main CanSecWest Ballroom - Sheraton Wall Center 1000 Burrard St, Vancouver, BC V6Z 2R9
  Presentation

Attendees (19)