27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)
8 人推荐 · 跨 7 个月 · 2011–2024
中文导读
微软安全专家 Bruce Dang 在 27C3 上的经典硬核演讲。他详细复盘了震网病毒（Stuxnet）漏洞的挖掘与逆向分析全流程，将应急研判技术与数个 0-day 漏洞的利用细节一路拆解到了操作码（opcode）层级。
为什么 HN 推它
由第一线亲手逆向分析 Stuxnet 的顶尖专家带来的权威技术解密，被 HN 极客奉为研究该历史级国家级网络武器 0-day 的圣经。
「想对 Stuxnet 每个 0-day 漏洞进行细致入微的硬核技术深挖，必看微软 Bruce Dang 的这场演讲。」HN 网友原话：For an amazing technical deep dive into each 0-day Stuxnet vulnerability watch this talk with Bruce Dang from Microsoft[1].
英文原摘要（HackerTube / Claude 整理）
Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.
HN recommends it as the definitive technical deep dive into Stuxnet's zero-days from someone who analyzed it first-hand.
HN 上的提及
a Microsoft employee broke down each of the exploits that Stuxnet used at a conference recently
I watched an excellent video explaining the 0-day vulnerabilities that stuxnet used
It's well worth watching anyway, lots of good info on the various exploits used by stuxnet, down to the opcode level.
detailed analysis of stuxnet
detailed analysis of stuxnet