George Nosenko is a security researcher at Embedi. He looks for vulnerabilities in software & hardware and takes part in improving the company's products.
[Abstract]
==========
In his talk, he is going to describe the steps to execute an arbitrary code in Cisco IOS, according to all the relevant mitigations to the given moment (DEP, Code Integrity, etc.). These steps reflect the experience of 0-day exploitation demonstrated at contest GeekPwn 2017 (Hong-Kong).