Jump to content
Nytro

Exploiting nginx chunked overflow bug, the undisclosed attack vector

Recommended Posts

Posted

Exploiting nginx chunked overflow bug, the undisclosed attack vector

Long Le

longld@vnsecurity.net

SECUINSIDE 2013

In this talk

•Nginx brief introduction

•Nginx chunked overflow bug

–The analysis

–The exploit

–The undisclosed attack vector

•x86-64 ROP tricks

•Demo

Download:

http://t.co/frjiFWoEwY

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...