Windows Exploitation Tricks: Abusing the User-Mode Debugger • Hacker News Board

Re: Windows Exploitation Tricks: Abusing the User-Mode Debugger

#11

Post by [deleted] » Tue, Jun 04, 2019, 8:52 AM UTC

maxheadroom wrote: post #8

> Windows Exploitation Tricks: Abusing the User-Mode Debugger ...and... > Nothing I’ve described here is a security vulnerability, but the behavior is interesting and it’s worth looking out for cases where it could be used. Maybe I'm misunderstanding this newfangled internets but isn't exploitation generally synonymous with security vulnerability? JFYI, for anyone who's interested, the equivalent debugging API method…

[deleted]

Re: Windows Exploitation Tricks: Abusing the User-Mode Debugger

#12

Post by mehrdadn » Tue, Jun 04, 2019, 9:03 AM UTC

tomglynch wrote: post #5

Larrikin wrote: post #3

Earlier quoted context omitted.

Google owns it.

They don't host their 'cloud' blog on blogspot: https://cloud.google.com/blog/topics/inside-google-cloud/an-... So why project zero?

Confused, why is this a big deal? It seems like such a minor thing.

Re: Windows Exploitation Tricks: Abusing the User-Mode Debugger

#13

Post by la_barba » Tue, Jun 04, 2019, 8:08 PM UTC

tomglynch wrote: post #2

Why is project zero hosted on blogspot?

Maybe now Google wont kill that service if their employees rely on it.. :P

Re: Windows Exploitation Tricks: Abusing the User-Mode Debugger

#14

Post by peter_d_sherman » Tue, Jun 04, 2019, 9:33 PM UTC

User mode debugging is an area that any present or future OS designer should be concerned about getting right in terms of debugging features vs. security implications...