Vulnerability Exploitation Technology of Structured Exception Handling Based on Windows
Weimin Wu, Chaowei Guo, Huang Zhiwei, Su Qing, Chen Qiuwei · Jisuanji gongcheng · 2012
This paper discusses the Structured Exception Handling(SEH) and related protection mechanism,from the perspective of attackers,summarizes the technology of SEH vulnerability exploitation.It uses heap addresses or addresses outside of protection modules to overwrite the pointer of SEH handles to bypass SafeSEH,and fakes SEH chain to bypass SEHOP.It analyzes some major methods of making program execution flow locate the Shellcode.Example verifies the effectiveness of the SHE vulnerability exploitation technology.