M$ gushed about its security of windows Vista at the Black Hat conference. Bad move!
Enter Joanna Rutkowska, a security researcher who then spent the day tearing it apart. She showed two forms of attacks. One was an exploit which allowed unsigned code to be loaded into the kernel, (the kernel being the brains of any operating system).
Another exploit took advantage of AMD’s Pacific Hardware Virtualization which she claimed as being undetectable super malware.
In her demo, the shellcode used disabled signature checking, thus allowing any unsigned driver to be subsequently loaded. Taking her attack a step further, she implemented a one-click tool, which she called “Kernelstike” to execute her Vista kernel exploit.
Call it fresh meat for sharks: The audience erupted into spontaneous applause, followed by whoops and woo-hoos throughout her demonstration.
She named the back door exploit “Delusion” and upon connecting via remote shell she was greeted with the message “Hi this is Delusion. Where do you want to go today?”
I know were I won’t be going and thats anywhere near Vista.
[source] via digg.
Related posts
- XBOX360 Hacked? At the recent German 23C3 Hacker Congress an anonymous hacker...
- Microsoft Vista officially released Finally, after more than five years since the launch...
- ‘Access Denied’ for pirated copies of Windows Vista? Microsoft will be playing hardball in a bid to...
- Microsoft Vista launch date announced After five long years under Windows XP, Microsoft has...
- Windows Vista is launched Microsoft’s new operating system for PC users is finally...
