客户机革命：利用三个漏洞从 VMware 客户机入侵 Windows 内核.pdf

1、#BHEU BlackHatEventsGuest Revolution:Chaining 3Guest Revolution:Chaining 3-bugs to compromise bugs to compromise the Windows kernel from the VMware guestthe Windows kernel from the VMware guestSpeakers:Junoh Lee,Gwangun Jung#BHEU BlackHatEventsInformation Classification:GeneralAgenda Agenda#BHEU Bla

2、ckHatEvents#BHEU BlackHatEventsInformation Classification:GeneralWho are we?Who are we?#BHEU BlackHatEventsInformation Classification:GeneralPwn2Own 2024 Virtualization CategoryPwn2Own 2024 Virtualization Category#BHEU BlackHatEvents#BHEU BlackHatEventsInformation Classification:GeneralVM escape ove

3、rviewVM escape overview#BHEU BlackHatEventsInformation Classification:GeneralVM escape overviewVM escape overview#BHEU BlackHatEventsInformation Classification:GeneralHypervisor attack surfaceHypervisor attack surface#BHEU BlackHatEventsInformation Classification:GeneralHypervisor attack surfaceHype

4、rvisor attack surface#BHEU BlackHatEventsInformation Classification:GeneralHypervisor attack surfaceHypervisor attack surface#BHEU BlackHatEventsInformation Classification:GeneralHypervisor attack surfaceHypervisor attack surface#BHEU BlackHatEventsInformation Classification:GeneralHypervisor attack

5、 surfaceHypervisor attack surface#BHEU BlackHatEventsInformation Classification:GeneralHGFS Uninitialized heap leakage(CVEHGFS Uninitialized heap leakage(CVE-20242024-22270)22270)#BHEU BlackHatEventsInformation Classification:GeneralHGFS Uninitialized heap leakage(CVEHGFS Uninitialized heap leakage(

6、CVE-20242024-22270)22270)#BHEU BlackHatEventsInformation Classification:General0 xD00000000qword44data_sizeversion2v9HGFS Uninitialized heap leakage(CVEHGFS Uninitialized heap leakage(CVE-20242024-22270)22270)#BHEU BlackHatEventsInformation Classification:GeneralHGFS Uninitialized heap leakage(CVEHG