Stack Spoofing: Evasion and Exploitation Techniques by Edward Henriquez

This podcast excerpt explains stack spoofing, a technique where attackers manipulate the call stack to evade security measures and execute malicious code undetected. It details how this manipulation works, covering methods like return address spoofing, fake stack frames, and stack pivoting. The discussion highlights how attackers leverage these techniques for malware evasion, exploit development, and anti-forensics. Finally, it outlines defensive strategies, including stack integrity protections, detection techniques, and memory forensics tools, to counter stack spoofing attacks.