hex86-64
1010 B
Bytecode_Jiu-Jitsu
PoC tools of Bytecode Jiu-Jitsu presented at Black Hat USA 2024 Briefings.
The presentation material is available here: https://www.blackhat.com/us-24/briefings/schedule/#bytecode-jiu-jitsu-choking-interpreters-to-force-execution-of-malicious-bytecode-38682
The PoC Injector binary we used in the presentation: https://www.virustotal.com/gui/file/3dd69181f59fbea2f95cb2ccf0d9827dc70f38c844f465abeeeed42c3f12f9f9
The workflow to use our tools for injection:
[Target interpreter] -> Tracer-BJJ -[Trace log]-> STAGER-BJJ -[Interpreter's internal structure]-> Extractor-BJJ -[Extracted bytecode and symbol tables]-> Injector-BJJ
For more information, please see README.md of each tool.
If any abuse of our tools in the wild is identified and action is required, please contact us through the inquiry desk: tos.usui@ntt.com. We are prepared to discuss measures such as sharing information with security vendors and law enforcement, as well as the potential withdrawal of this repository.