Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
古典的なStack Overflow から JIT-ROPまで
Search
Sponsored
·
Your Podcast. Everywhere. Effortlessly.
Share. Educate. Inspire. Entertain. You do you. We'll handle the rest.
→
@tkmru
December 15, 2016
Programming
360
1
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
古典的なStack Overflow から JIT-ROPまで
ゼミにて
@tkmru
December 15, 2016
More Decks by @tkmru
See All by @tkmru
10分で知るゲームが「チートされる」仕組み/findy202603
tkmru
0
1k
リバースエンジニアリング新時代へ! GhidraとClaude DesktopをMCPで繋ぐ/findy202507
tkmru
8
2.6k
Bring Your Own Container: When Containers Turn the Key to EDR Bypass/byoc-avtokyo2024
tkmru
2
1.9k
ipa-medit: Memory search and patch tool for IPA without Jailbreaking/ipa-medit-bh2022-europe
tkmru
0
420
Ipa-medit: Memory modification tool for iOS apps without Jailbreaking/ipa-medit-codeblue2022
tkmru
0
240
趣味と実益のための著名なOSSライブラリ起因の脆弱性の探求/seccamp2021-b5
tkmru
0
5.5k
Ipa-medit: Memory Search and Patch Tool for IPA Without Jailbreaking @Black Hat USA 2021 Arsenal/ipa-medit-bh2021-usa
tkmru
1
4.8k
Learn the essential way of thinking about vulnerabilities through post-exploitation on middlewares (MySQL/PostgreSQL編)/seccamp2020-b8
tkmru
3
990
apk-medit: memory search and patch tool for debuggable APK @CODE BLUE 2020 Bluebox
tkmru
0
250
Other Decks in Programming
See All in Programming
AI 時代のソフトウェア設計の学び方
masuda220
PRO
29
13k
ふつうのFeature Flag実践入門
irof
8
4.1k
1B+ /day規模のログを管理する技術
broadleaf
0
100
ローカルLLMを使ってB2Bサービスを作っていての学び
yaotti
0
200
CSC307 Lecture 17
javiergs
PRO
0
320
Composerを使ったサプライチェーン攻撃の様子を眺めてみる #phpstudy
o0h
PRO
2
250
ECSアプリログをFireLensでコスト削減しようとしたけど諦めた話 in Fargate×Node.js
akihisaikeda
2
4.2k
そのテスト、説明できますか?~LWテスト戦略FW~のご紹介
nakahara
0
150
コンテキストの使い捨てをやめる — ビジネスルール駆動開発と miko —
ioki
0
210
さぁV100、メモリをお食べ・・・
nilpe
0
150
Signal Forms: Details & Live Coding @enterJS 2026 in Mannheim
manfredsteyer
PRO
0
160
キャリア迷子上等 ─ "ない道"は自分で作ればいい
16bitidol
3
2.2k
Featured
See All Featured
Lessons Learnt from Crawling 1000+ Websites
charlesmeaden
PRO
1
1.3k
How to Talk to Developers About Accessibility
jct
2
240
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
soudai
PRO
201
75k
[RailsConf 2023 Opening Keynote] The Magic of Rails
eileencodes
31
10k
How to make the Groovebox
asonas
2
2.2k
How STYLIGHT went responsive
nonsquared
100
6.2k
Speed Design
sergeychernyshev
33
1.9k
4 Signs Your Business is Dying
shpigford
187
22k
The Illustrated Guide to Node.js - THAT Conference 2024
reverentgeek
1
390
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
47
8.2k
Why Our Code Smells
bkeepers
PRO
340
58k
Done Done
chrislema
186
16k
Transcript
ݹయతͳ4UBDL0WFSqPX ͔Β +*5301·Ͱ θϛ !ULNSV
ؔݺͼग़࣌͠ͷελοΫ w DBMMGVODUJPOOBNF w ΞηϯϒϦͰDBMM໋ྩͰ͕ؔ͋ΔΞυϨεʹඈͿ w ͦͷࡍɺΓઌͷΞυϨεΛϦλʔϯΞυϨεͱͯ͠ ελοΫʹஔ͘ w ؔΛ࣮ߦ͠ऴ͑ΔͱSFU໋ྩͰϦλʔϯΞυϨεʹΔ
w DBMMGVODUJPOOBNFΛ࣮ߦͨ͠ͱ͖ͷ ɹɹɹɹɹɹɹɹɹɹɹɹɹελοΫͷ༷ࢠ ม ม ϦλʔϯΞυϨε
PWFSqPX͢Δίʔυྫ w ಡΈࠐΈαΠζΛνΣοΫ͠ͳ͍ؔΛ͍ͬͯΔͱ PWFSqPXͷݪҼͱͳΔ w FY TUSDQZ HFUT
4UBDL0WFSqPX w PWFSqPXͤ͞ɺ࣮ߦ͍ͨ͠ίʔυΛελοΫʹॻ͖ࠐΉ w ͦͷࡍɺϦλʔϯΞυϨεΛ࣮ߦ͍ͨ͠ίʔυ͕͋Δ ΞυϨεʹॻ͖͑Δ w ॻ͖͑ΒΕͨΞυϨεʹ͋Δίʔυ͕࣮ߦ͞ΕΔ CVG<> PME
ϦλʔϯΞυϨε BBBB BBBB BBBB BBBB Y PWFSqPX͢ΔલͷελοΫͷ༷ࢠ PWFSqPXͨ͠ޙͷελοΫͷ༷ࢠ
ରࡦͷҰྫ w $16ͷ/9CJU /PF9FDVUFCJU w ελοΫʹ࣮ߦͰ͖ͳ͍ྖҬΛ࡞Δ w ࣮ྫʣ-JOVY&YFD4IJFMEɺ8JO%&1 w
PWFSqPXʹΑΓελοΫ্ʹ߈ܸίʔυΛஔ͞Εͯ ελοΫ্ͷίʔυ࣮ߦͰ͖ͳ͍
301 w 3FUVSO0SJFOUFE1SPHSBNNJOH w /9CJU༗ޮԼͰTUBDL্ͷίʔυΛ࣮ߦͰ͖ͳ͍ w ͔͠͠ɺ࣮ߦՄೳͳྖҬ FYϥΠϒϥϦ ͋Δ w
࣮ߦՄೳͳྖҬͷதͰ͑ͦ͏ͳίʔυΛ அยతʹݺͼग़͢͜ͱͰҙͷಈ࡞Λͤ͞Δ͜ͱ͕ Ͱ͖Δ
w 301Ͱར༻͢Δஅยతͳίʔυͷ͜ͱΛ301HBEHFUͱ ݺͿ w SFU໋ྩ͕ޙΖʹ͍͍ͭͯΔίʔυ w FY QPQSEJSFU w SFU໋ྩΛ࣮ߦ͠Ϧλʔϯ͢ΔஅยతͳίʔυΛ
ෳݺͿ͜ͱͰతͷಈ࡞Λୡ͢Δ͜ͱ͔Β 3FUVSO0SJFOUFE1SPHSBNNJOHͱ໊͚ΒΕͨ 301
FYQMPJUͷྫ w ϦλʔϯΞυϨεΛҎԼͷॱͰॻ͖͑Δ w TZTUFN lCJOTIz Λ࣮ߦ͠γΣϧΛىಈ w QPQSEJSFUͷΞυϨεҾΛηοτ͢Δ w
ελοΫʹCJOTIͷΞυϨεΛੵΜͰ͓͘ w DBMMTZTUFN ͷΞυϨεTZTUFN ΛݺͿ
301ͷσϞ
ରࡦͷҰྫ w "4-3 "EESFTT4QBDF-BZPVU3BOEPNJ[BUJPO w ΞυϨεۭؒஔΛϥϯμϜʹ͢Δ w ελοΫɺώʔϓɺσʔλྖҬͷΞυϨε͕ϥϯμϜʹ w
ܾΊଧͪͰΞυϨεΛࢦఆ͢Δ߈ܸΛແޮԽͰ͖Δ
"4-3 -JOVY ͷ w (05ͷΞυϨε͕ݻఆͷ·· w (05 (MPCBM0⒎TFU5BCMF w
γϯϘϧ ؔ ͷϙΠϯλͷྻ w ؔͷΞυϨεΛղܾ͢ΔͨΊͷྖҬ
+*5301 w +VTU*O5JNF301 w (05ʹొ͞Ε͍ͯΔؔΛͬͯɺ࣮ߦதʹ ࣮ߦՄೳྖҬΛಡΈऔΔ w ಡΈऔͬͨྖҬʹ͋Δ301HBEHFUΛ͏ w ΞυϨε͕ϥϯμϜԽ͞Εͨ͋ͱʹಡΈऔΔ͜ͱͰɹ
"4-3Λճආ
+*5301ͷରࡦ w ͍Ζ͍Ζจ͕ग़͍ͯΔ͕ɺ࣮ࡍʹ04ίϯύΠϥʹ࣮ ͞Εͨͷݱ࣌Ͱͳ͍ɻ w ࠓޙɺࢹ͍͖͍ͯͨ͠
ࢀߟจݙ w "OUJ301ࡇΓͩͥʂ64&/*94FDVSJUZ301 3FUVSOPGUIFFEJZV[VIBSBͷه IUUQZV[VIBSBIBUFOBCMPHKQFOUSZ w +*5301؇ख๏)FJTFOCZUFʹ͍ͭͯ·ͱΊͯΈΔ ͍ΖςΫϊϩδʔIUUQJOB[IBUFOBCMPHDPN FOUSZ