Lately, I've been watching talks from pre-2010. There's so much important infosec work/history out there, but you need to know what to look for.
What are some of your favorite talks, blogs, events, etc from 2012 or before that you'd recommend to those newer to the industry?
What are some of your favorite talks, blogs, events, etc from 2012 or before that you'd recommend to those newer to the industry?
For my "learning Windows" adventure, these have been awesome
* Analyzing local privilege escalations in win32k - @mxatone (2008)
* Kernel exploitation – r0 to r3 transitions via KeUserModeCallback -@j00ru (2010)
* Kernel Attacks through User-Mode Callbacks - @kernelpool (BH 2011)
* Analyzing local privilege escalations in win32k - @mxatone (2008)
* Kernel exploitation – r0 to r3 transitions via KeUserModeCallback -@j00ru (2010)
* Kernel Attacks through User-Mode Callbacks - @kernelpool (BH 2011)
@mxatone @j00ru @kernelpool I also highly suggest "Professional Source Code Auditing" from BH 2002 by @mdowd @neelmehta @halvarflake Chris Spencer and Nishad Herath
And totally include your own work :) We want to know about it!
@mxatone @j00ru @kernelpool @mdowd @neelmehta @halvarflake Oh yeah, and these two Phrack articles on malloc exploits are 😍
phrack.org/issues/57/8.ht… (2001)
phrack.org/issues/61/6.ht… (2003)
phrack.org/issues/57/8.ht… (2001)
phrack.org/issues/61/6.ht… (2003)
