Download as PDF, PPTX
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-1-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-2-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-3-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-4-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-5-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-6-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-7-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-8-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-9-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-10-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-11-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-12-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-13-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-14-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-15-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-16-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-17-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-18-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-19-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-20-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-21-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-22-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-23-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-24-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-25-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-26-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-27-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-28-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-29-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-30-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-31-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-32-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-33-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-34-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-35-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-36-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-37-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-38-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-39-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-40-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-41-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-42-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-43-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-44-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-45-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-46-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-47-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-48-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-49-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-50-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-51-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-52-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-53-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-54-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-55-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-56-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-57-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-58-2048.jpg)
![[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang](https://image.slidesharecdn.com/u25saichengyongqingheandzhiminwangcb20-210112140344/75/CB20-U25-Automated-Hunting-for-Cross-Server-Xrefs-in-Microsoft-RPC-and-COM-by-Sai-Cheng-Yongqing-He-and-Zhimin-Wang-59-2048.jpg)
Uploaded byCODE BLUE
PDF, PPTX192 views
[CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang
The document discusses automated hunting techniques for cross-server xrefs within Microsoft RPC and COM, detailing the security implications and penetration testing strategies employed by the SycloverSecurity team. It encompasses an overview of RPC, COM architectures, various vulnerabilities, specifically focusing on a case study of a CVE, and techniques for searching and backtracking calls across different processes. Additionally, it introduces a tool called TurboRex which facilitates the discovery of RPC server/client routines and COM interface methods.
More Related Content
What's hot
![[MGDC] 리눅스 게임 서버 성능 분석하기 - 아이펀팩토리 김진욱 CTO](https://cdn.slidesharecdn.com/ss_thumbnails/mgdcifunfactoryjinukkim-181018053904-thumbnail.jpg?width=640&height=640&fit=bounds)
Similar to [CB20]-U25 Automated Hunting for Cross-Server Xrefs in Microsoft RPC and COM by Sai Cheng, Yongqing He and Zhimin Wang
More from CODE BLUE
![[cb22] Tracking the Entire Iceberg - Long-term APT Malware C2 Protocol Emulat...](https://cdn.slidesharecdn.com/ss_thumbnails/d1t1s08takahiroharuyamac2scan-230101090416-eee10a0a-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] Hayabusa Threat Hunting and Fast Forensics in Windows environments fo...](https://cdn.slidesharecdn.com/ss_thumbnails/d2t2s052022-10-28-dfirandthreathuntingwithwindowseventlogszachmathisversion3-230103072306-eb57bdc0-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] Fight Against Malware Development Life Cycle by Shusei Tomonaga and Yu...](https://cdn.slidesharecdn.com/ss_thumbnails/d1t1s07tomonagamasubuchifightagainstmalwaredevelopmentlifecycle2022-10-1806-230101090047-9ab922cd-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] Your Printer is not your Printer ! - Hacking Printers at Pwn2Own by A...](https://cdn.slidesharecdn.com/ss_thumbnails/anjieyangyourprintercodebluefortranslator-230103071138-8fcd3032-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] Tales of 5G hacking by Karsten Nohl](https://cdn.slidesharecdn.com/ss_thumbnails/d2t1s09221127-230103071757-420d7b85-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] CloudDragon’s Credential Factory is Powering Up Its Espionage Activiti...](https://cdn.slidesharecdn.com/ss_thumbnails/d2t1s04zih-cingliaoyu-tungchnagclouddragonscredentialfactoryispoweringupitsespionageactivitiesagains-230102085356-8e46661b-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] Wslinkのマルチレイヤーな仮想環境について by Vladislav Hrčka](https://cdn.slidesharecdn.com/ss_thumbnails/d1t2s04vladislavhrckaunderthehoodofwslinksvirtualmachinejapanesemachinetranslation-230102091457-ae9568be-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] Are Embedded Devices Ready for ROP Attacks? -ROP verification for low-...](https://cdn.slidesharecdn.com/ss_thumbnails/d1t2s05u25yuumatakienkentarovar5-230102092618-bbf74898-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] Under the hood of Wslink’s multilayered virtual machine en by Vladisla...](https://cdn.slidesharecdn.com/ss_thumbnails/d1t2s04vladislavhrckaunderthehoodofwslinksvirtualmachine-230102091156-e3c59f0e-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] Mal-gopherとは？Go系マルウェアの分類のためのgimpfuzzy実装と評価 by 澤部 祐太, 甘粕 伸幸, 野村 和也](https://cdn.slidesharecdn.com/ss_thumbnails/d1t1s09yutawhoisthemalgopherjapanese1-230102082553-e0b239bb-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] Who is the Mal-Gopher? - Implementation and Evaluation of “gimpfuzzy”...](https://cdn.slidesharecdn.com/ss_thumbnails/d1t1s09yutawhoisthemalgopherenglishesix1-230102083158-ba91a7f7-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] From Parroting to Echoing: The Evolution of China’s Bots-Driven Info...](https://cdn.slidesharecdn.com/ss_thumbnails/codeblue2022chechangsilviayeh-230102084414-c1570bd5-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] ”The Present and Future of Coordinated Vulnerability Disclosure” Inte...](https://cdn.slidesharecdn.com/ss_thumbnails/d2t1s07allanfriedmanen-230103060535-324b96bf-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] 「協調された脆弱性開示の現在と未来」国際的なパネルディスカッション（3） by Lorenzo Pupillo](https://cdn.slidesharecdn.com/ss_thumbnails/d2t1s07lorenzopupilojp-230103061253-df49295c-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] 「協調された脆弱性開示の現在と未来」国際的なパネルディスカッション（4） by 板橋 博之](https://cdn.slidesharecdn.com/ss_thumbnails/d2t1s07hiroyukiitabashijp-230103063336-b5b21552-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] 「協調された脆弱性開示の現在と未来」国際的なパネルディスカッション（2）by Allan Friedman](https://cdn.slidesharecdn.com/ss_thumbnails/d2t1s07allanfriedmanjp-230103060017-24438771-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] 「協調された脆弱性開示の現在と未来」国際的なパネルディスカッション （1）by 高橋 郁夫](https://cdn.slidesharecdn.com/ss_thumbnails/d2t1s07ikuotakahashijp-230103054428-3dbd8ee7-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] "The Present and Future of Coordinated Vulnerability Disclosure" Inter...](https://cdn.slidesharecdn.com/ss_thumbnails/d2t1s07hiroyukiitabashien-230103064031-868ff2ae-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] "The Present and Future of Coordinated Vulnerability Disclosure" Inter...](https://cdn.slidesharecdn.com/ss_thumbnails/d2t1s07ikuotakahashien-230103055145-37529240-thumbnail.jpg?width=640&height=640&fit=bounds)
![[cb22] "The Present and Future of Coordinated Vulnerability Disclosure" Inter...](https://cdn.slidesharecdn.com/ss_thumbnails/d2t1s07lorenzopupiloen-230103062123-07ea5347-thumbnail.jpg?width=640&height=640&fit=bounds)
Recently uploaded
In this document
Powered by AI
Presentation on automated hunting for cross-server Xrefs in Microsoft RPC and COM, listing team members and expertise in cyber security.
Overview of MSRPC, its functionalities, architecture and relevant interface files used to demonstrate its operation.
Introduction to COM including architecture, apartment models, and server interaction methods.
Discussion of logic bugs (CVE-2020-0773), issues with traditional call chain searches, and the introduction to Cross-Server Xrefs.
Detailed analysis of impersonation methods in RPC and COM, including implications and examples of various scenarios.
Types of cloaking in COM, including static and dynamic, and their effectiveness in security.
Techniques for automated searching of Cross-Server Xrefs and RPC client routines, highlighting code structure and methods.
Demonstration of backtracking methodologies employed in Metasm for security analysis.
Strategies for locating COM interface methods and their respective activation API.
Final remarks on the presentation and introduction to TurboRex - a tool for RPC and COM analysis.
Acknowledgments of contributors and open floor for questions.