1. Enhanced Security Testing- Do Automate Debuggers
Nitin Kumar, Lead Software Engineer
Varun Bhal, Lead Software Engineer
Adobe Systems

2. Security testing is usually traded off
Abstract
Finding crashes, intermittent crashes and poor coding is a high priority in testing environment
Security testing is usually traded off
How many crash dumps can be analyzed?
How Automation with debuggers can be helpful in many testing scenarios
Crash Dump Analysis automation
Finding DLL Hijacking vulnerabilities in automation

3. Call stack will not be correct
Crash Dump Analysis
Workflow
OS dumps
Dump Collection
Application dumps
Start cdb
Load dump file
Symbols found
Load Symbols
Run DBG commands
Report the details
Call stack will not be correct

4. Set the gflag for executable
DLL Hijacking Automation
Workflow
Set path for symbols
Total logs created
Set the gflag for executable
Filter the logs
Run cdb with attached process
Resolution Failure
Resolution Hijacking
Chain Loading

5. https://en.wikipedia.org/wiki/Dynamic-link_library
References & Appendix
Debuggers- windbg tutorial

6. Author Biography
Nitin Kumar – Lead Software Engineer
Working as Lead software engineer on Security testing and automation development for Adobe flash player.
2. Varun Bhal – Lead Software Engineer
Working as Lead software engineer in automation development for Adobe flash player.

7. Thank You!!!