Dachshund: Digging for and Securing (Non-)Blinded Constants in JIT Code
Giorgi Maisuradze, Michael Backes, Christian Rossow · 2017
Author(s): Giorgi Maisuradze, Michael Backes, Christian Rossow Download: Paper (PDF) Date: 27 Feb 2017 Document Type: Reports Additional Documents: Slides Video Associated Event: NDSS Symposium 2017 Abstract: Modern browsers such as Chrome and Edge deploy constant blinding to remove attacker-controlled constants from the JIT-compiled code. Without such a defense, attackers can encode arbitrary shellcode in constants that get … Continued