Chapter 4 - System Exploitation

Abstract

This chapter unveils the complete details of system exploitation covering different types of exploits and vulnerabilities used to compromise the system. The chapter provides a hierarchical layout of different protection mechanisms designed by vendors and how these are bypassed by attackers to author successful exploits. We cover in detail about Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR) bypasses including exploit writing mechanisms such as Return-oriented Programming (ROP) and important information leakage vulnerabilities. The chapter also touches the different security solutions designed by associated companies to subvert exploit writing efforts of the attackers. In addition, details about advanced malware have been presented. We also touch base on the techniques deployed by malware for bypassing static and dynamic solutions designed by security researchers.