【大湾区白帽论坛技术议题】WindowsDirtyPipe:The Narrow Pipe to escape AppContainer

## 演讲议题:WindowsDirtyPipe:The Narrow Pipe to escape AppContainer ### 演讲者:温志华 (北京赛博昆仑科技有限公司安全研究员) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_00.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-bbdbc4207d9a89ba4afb336c954ef67e94357df7.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_01.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-f163d389cdb3ee480c6f6d781629cdc947ff260d.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_02.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-5b9308f9c0e686a15f67f8bc6e66008112a2432d.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_03.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-742f88ee564b29f1a07f8481e050be46041b26ad.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_04.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-0c51d46a2b4d83b81811572b34a0d6c7b7789689.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_05.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-35e5b411feb4478e771000c0035d612ecfab5378.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_06.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-e9bcbbadaec4166587993629f8d9300944e76b3e.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_07.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-9510c2cc7461daca72e3a4d534816246a4bdbfcb.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_08.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-10c18b6eedb5b49c1c6d3b8f12323524c522e912.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_09.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-76c0d94af72fe599fb815f20d93f34a2beb49693.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_10.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-282bfb8ae27f5ce643d8a4694d3675c3251f0117.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_11.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-d0fe5b9ee3f83fc153b9ba650a5d6e1e968156a7.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_12.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-8b9c4efea702c6887a02c60413cfea60a5d0e703.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_13.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-fc8210b12ca668b4f736042a1393f6059f48595f.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_14.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-f35320ccd74d95dcbeb4845cbb296d8f6b89e96e.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_15.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-d81a1e11c54130935ddb594ba33a1433c76cc9e0.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_16.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-da46d618ee7e80b4e459827590b92edc9b0cf4a9.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_17.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-c4cc165247cb6d0b3197c063cc79e90ca79fe694.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_18.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-1b0cd1969ee53516b194e12042655e28e2ce0256.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_19.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-8140faad4c93ca92f728b4290bdeb72c53ad6129.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_20.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-3ddf5c9734ce7c7d255dbe917fb6e971cada8d1b.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_21.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-9b8f9d8e504a647b9eb794253f2807844052ca9e.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_22.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-512f79117950c72fff19950c73979a3220eae7bc.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_23.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-ccbe2e0b5a66167bdbd7907f4796f50a32b6c6dc.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_24.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-223aff7ecb9f62f71451f10def5de55e03af5ff3.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_25.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-c1f2781aafb220198cec26fc30b76e3a1205bf47.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_26.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-0fd50280ec17f7176be9416c6247a3f4fed5a1b6.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_27.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-070dcbb14056fc0d5b86586ecf0034d73c0ae16c.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_28.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-154f60e1cd48044b6e50e60e2dc4c2623b205bed.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_29.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-22f00af9f6aca07c47d5e5b34140859114ea1f65.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_30.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-451cfc2da2d9d5ac5a2b3627f7668f437e8cb07a.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_31.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-bca0d6c43242719ecdbc0027e8c5adc77ebc1e70.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_32.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-1660309a064cd38018664ae3b4eb594aa0a228bb.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_33.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-b4cb6a551d66318dfc6a8f098ab6d9c6553e8b5e.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_34.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-04392f830c108be03a8e24c527ca1bd0937c265d.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_35.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-07ab9922ba5d2d998b2f064046718c72417c3446.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_36.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-9a8c3d3d1eeb86c0fcd8e60760cc34215b989aa2.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_37.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-13d1a9e64e457b801e9cecb29a0cb0b531f7d1ec.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_38.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-1e52008ee6875716a46cf1b8effd9aa00e42f94f.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_39.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-9196fdc6768130f6f2208f2310064bf8ed9cd7a3.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_40.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-c75413d14c932e239b13a844c68952a16b6c7d16.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_41.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-d3928de48c532076eb4ba142c93be61ff1ed2399.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_42.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-8c792b106b4fe666b6538e7ee13cf55c07379741.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_43.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-6c69b5489bffb10d1da86a0c635ec19beaf68073.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_44.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-637889b38bafbf2e0a5989cfa6723676f2ec2700.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_45.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-81606372948632f397ef6af98ea491d562966bf3.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_46.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-64ef4f48ebac82420d31a63757c95afe40e1ebd0.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_47.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-47dd813a286652426d9660d7c99d7a448a2b674d.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_48.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-8ae4ecbc05f519dee3d2ee8bb9425a2443140aff.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_49.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-96700dcaf00a29e23104d15824fc6cb7f9245a02.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_50.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-6a328ca822aada3e354159e3e58892684a0f5df2.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_51.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-b9ee2a051868063b6f833f578d2368a2228466b5.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_52.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-888365d5017ba33378838a641c0bde0c96def57d.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_53.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-8a31b58966f1c5ecba2d5fb5ed265a090339192f.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_54.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-7448ad0c44fa7e03ff2e56dfccd95e69713bb8b7.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_55.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-fd2145160fa75e9c918ff16d3f57968153b566ee.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_56.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-edae25c9fcb631ef613ce7310dd1489839d7612b.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_57.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-3bfccd862deb89eb10091784824cadc48ab66dbb.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_58.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-71d56431a5848832b259a4e22f7b20cf42c8b708.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_59.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-637a90c990d59fb80ebf0784345d5d6464319fa7.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_60.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-3c30dcbed48e3793fb219c4da42a1b524e1bfff3.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_61.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-a511db1e5d7675c1fd6d8902441813d33239e704.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_62.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-aabb916b9befed28ed057fa8aa438bcc8cdfa2fd.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_63.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-28116e95f27af0614226ebce2751616a0cde16b1.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_64.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-ce599b63c658132c499f21e01cb2b44c272d39d5.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_65.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-f19b04ca31df4272aa73abaf45c8232f08e0bef4.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_66.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-680d755a508cd63deebfc6ec3c467c89a1008839.png) ![WindowsDirtyPipe The Narrow Pipe to Escape AppContainer_67.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2022/08/attach-eb64285028eb6e78d3ef76f6b3e6e1bed1f5a1cb.png)

1 个回答

Kinding

讲的好啊!!!!!!!

相似问题