Closing the Windows Gap

Summary: Trail of Bits is releasing AppJailLauncher, a framework that uses Windows AppContainers to isolate exploitable Windows TCP services for CTF challenges, along with the source code to greenhornd, a 2014 CSAW Windows exploitation challenge. The post argues that few Windows challenges exist in CTF - only Russian CTFs release them, none of the large American ones do - and that the best Windows security research has come out of Russia and China.
What's compelling: The post's claim that the strongest Windows research comes from Russia and China, attributed to those researchers actually using Windows, points at a skills gap in the Western talent pipeline that CTF training is supposed to fill.

Read the original at Trail of Bits Blog ↗