System and method for automated exploitation generation
Embodiments can relate to a system for automated exploit generation that receives input data representative of a target action to establish a target having a potential target vulnerability. The system can build a simulated target environment that includes the established target. The system can conduct an analysis method including a static, a concrete, a dynamic, and/or a symbolic analysis. The system can create a chainable sequence including an information disclosure, a read, a write, and/or an execution exploit primitive. The system can generate an exploit chain that, when executed by the processor in response to the target action, can transform the target action to a target failure within the simulated target environment and thereby expose the target vulnerability. The system can execute the exploit chain within the simulated target environment to examine coverage of the exposed target vulnerability. The system can generate an output representative of the exposed target vulnerability.
1. A system for automated exploit generation, the system comprising:
a processor; and
a memory associated with the processor having instructions stored thereon that when executed will cause the processor to:
receive input data representative of a target action to establish a target having a potential target vulnerability;
build a simulated or emulated target environment that includes the established target;
conduct an analysis method including one or more of a static, a concrete, a dynamic, or a symbolic analysis of one or more exploitation techniques, the analysis method configured to generate one or more artifacts including one or more behavioral signatures of exploit primitives that translate across different and disparate exploitation techniques;
create a chainable sequence including the one or more artifacts and one or more of an information disclosure, a read, a write, or an execution exploit primitive;
generate an exploit chain that, when executed by the processor in response to the target action, will transform the target action to a target failure within the simulated or emulated target environment and thereby expose the target vulnerability, the exploit chain including the chainable sequence;
execute the exploit chain within the simulated or emulated target environment to examine coverage of the exposed target vulnerability; and
generate an output representative of the exposed target vulnerability.
2. The system of claim 1 , wherein:
the target is of one or more of a software target, a device target, or an operating system target.
3. The system of claim 1 , wherein:
the exploit chain includes a series of events that transforms the target action to the target failure.
4. The system of claim 1 , wherein:
the exploit chain includes one or more of a path constraint, an execution trace, a performance metric, or metadata.
5. The system of claim 4 , wherein:
metadata includes pre-target failure metadata and post-target failure metadata.
6. The system of claim 1 , wherein:
the exploit chain is generated from an exploit primitive.
7. The system of claim 1 , wherein:
the target vulnerability includes one or more of an error vulnerability, a flaw vulnerability, or an undesired behavior vulnerability.
8. The system of claim 1 , wherein:
exposing the target vulnerability includes exposing a proof of the target vulnerability.
9. The system of claim 1 , wherein:
the output representative of the exposed target vulnerability is generated in one or more diversified forms.
10. The system of claim 9 , wherein:
the one or more diversified forms includes exported exploit demonstration script or system executable shellcode.
11. A computer readable medium having instructions thereon that when executed by a processor will cause the processor to:
receive input data representative of a target action to establish a target having a potential target vulnerability;
build a simulated or emulated target environment that includes the established target;
conduct an analysis method including one or more of a static, a concrete, a dynamic, or a symbolic analysis of one or more exploitation techniques, the analysis method configured to generate one or more artifacts including one or more behavioral signatures of exploit primitives that translate across different and disparate exploitation techniques;
create a chainable sequence including the one or more artifacts and one or more of an information disclosure, a read, a write, or an execution exploit primitive;
generate an exploit chain that, when executed by a processor in response to the target action, will transform the target action to a target failure within the simulated or emulated target environment and thereby expose the target vulnerability;
execute the exploit chain within the simulated or emulated target environment to examine coverage of the exposed target vulnerability; and
generate an output representative of the exposed target vulnerability.
12. The computer readable medium of claim 11 , wherein:
the target is of one or more of a software target, a device target, or an operating system target.
13. The computer readable medium of claim 11 , wherein:
the exploit chain includes a series of events that transforms the target action to the target failure.
14. A method for automated exploit generation, the method comprising:
receiving input data representative of a target action to establish a target having a potential target vulnerability;
building a simulated target environment that includes the established target;
conducting an analysis method including one or more of a static, a concrete, a dynamic, or a symbolic analysis of one or more exploitation techniques, the analysis method configured to generate one or more artifacts including one or more behavioral signatures of exploit primitives that translate across different and disparate exploitation techniques;
create a chainable sequence including the one or more artifacts and one or more of an information disclosure, a read, a write, or an execution exploit primitive;
generating an exploit chain that, when executed by a processor in response to the target action, will transform the target action to a target failure within the simulated or emulated target environment and thereby expose the target vulnerability, the exploit chain including the chainable sequence;
executing the exploit chain within the simulated or emulated target environment to examine coverage of the exposed target vulnerability; and
generating an output representative of the exposed target vulnerability.
15. The method of claim 14 , wherein:
the target is of one or more of a software target, a device target, or an operating system target.
16. The method of claim 14 , wherein:
the exploit chain includes a series of events that transforms the target action to the target failure.