3 posts in tag Demo
Windows boot from UEFI to kernel
20 May 2019
by
Mathieu
-
Technical
-
Reverse Engineering
Windows Kernel
Windows boot
UEFI
Demo
Reven
Getting full visibility into the Windows 10 OS’ boot mechanisms is challenging. REVEN opens up a new world of possibilities with its timeless analysis technology! We used REVEN to record the Windows OS’ boot process, all the way from before the UEFI firmware transfers control to the boot process, to...
Full visibility of a Windows Kernel Bug with Timeless Analysis (CVE-2018-8410)
One of the situations where REVEN (aka Tetrane) really shines is digging into undocumented kernel mechanisms, especially in cases where WinDBG abstracts information away from the user. In the following video, we will analyze a reference counting bug in the Windows Kernel (CVE-2018-8410 published by Google Project Zero) and try...
Analysis of VLC Exploit Arbitrary Code Execution (CVE-2018-11529)
This is the analysis of VLC Exploit Arbitrary Code Execution (CVE-2018-11529) done REVEN v2. It leverages our timeless analysis technology and several key features:
Data Tainting
Memory History
Backtrace
etc.