Defcon, testing and exploiting
Summary: At Defcon, Immunity introduced the first iteration of its NOP certification test, which Sourcefire analyst Lurene Grenier completed at the hardest level in modest time despite not using Immunity's tools. Grenier then released a series of Windows executables called Advanced Windows Buffer Overflows (AWBOs) to extend exploit-development practice beyond the NOP bar, with exploits run on Windows 2000 SP4 using provided shellcode or ret2lib, no hard-coded stack returns, and no source code.
Why it matters: The exercises were play-tested by the Sourcefire Vulnerability Research Team and confirmed exploitable, and they are being released slowly over the next few months - a reminder that hands-on exploit development skill is being deliberately cultivated and benchmarked in public, and that the bar for it keeps moving.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026