Experience in debugging ie Vulnerabilities

During the vulnerability debugging process, I personally feel that the most difficult is the IE browser and Flash Player vulnerabilities. Here we plan to record the learning experience (mainly based on the UAF class) to help new people learn.

First of all, the difference between the IE vulnerability is that the program execution process is controlled by attackers. The JS script in POC reflects the C ++ code in mshtml, which determines the execution process of the program. Therefore, it is critical for the IE vulnerability to carefully study the POC. In addition, debugging for IE vulnerabilities requires a strong understanding of IE itself, which is also the motivation for writing this blog. If you are not clear about the mechanisms behind IE, then the IE vulnerabilities cannot be adjusted at all.

 

Experience in debugging ie Vulnerabilities