REVEN DEMO - Taint and IDA Integration (2/3)


Apr 21, 2020
by Mathieu
Categories: Tutorial -
Tags: Demo - REVEN -




This video continues the analysis of CVE-2019-1347. This part of the demo uses data flow tainting forward. It also shows the IDA integration to get both the static & the dynamic view of the application under analysis.

The first video demonstrated how to move quickly from a system crash to the input file responsible.

Find the CVE-2019-1347 (“When a mouse over a file is enough to crash your system”) full vulnerability analysis report here

This video is the second of a series of 3.

  • First video
  • The video presented here is the second one.
  • The third video is coming soon.
Next post: REVEN DEMO - Comparing the dynamic execution on 2 systems (3/3)
Previous post: REVEN DEMO - From a crash to the input file and WinDbg Integration (1/3)