Hacking Windows 95 #33c3

•

1 j'aime•607 vues

Zoltan Balazs

Hacking Windows 95 #33c3 lightning talk

Internet

How to hack
Windows 95
Zoltan Balazs
MRG Effitas
33C3

How did I get into this?
Hack Win95 at a CTF
Could not hack it during the CTF time limit
My goal
• Hack it with existing tools (ain’t nobody got time for 0days)
• Remote code exec
• No user interaction
Hack prerequisites
• Default Win95
• C: writable share
• Networking configured

https://web.archive.org/web/20060307153224/http://www.netxeyes.org/Fluxay5Manaul.pdf - 158 page of manual !!!!
Banyet Soft Labs, 2002?

Hack The Planet!
https://www.youtube.com/watch?v=x5Yt5UjLR1w
https://jumpespjump.blogspot.hu/2014/02/hacking-windows-95-part-1.html
https://jumpespjump.blogspot.hu/2014/05/hacking-windows-95-part-2.html
zoltan.balazs@mrg-effitas.com
@zh4ck
JumpESPJump.blogspot.com
Greetz to @CrySySLab,
@SpamAndHex

Recommandé

Sandbox detection: leak, abuse, test - Hacktivity 2015Zoltan Balazs

[ENG] OHM2013 - The Quest for the Client-Side Elixir Against Zombie Browsers - Zoltan Balazs

Ransomware - what is it, how to protect against itZoltan Balazs

Test & Tea : ITSEC testing, manual vs automatedZoltan Balazs

DEFCON 22: Bypass firewalls, application white lists, secure remote desktops ...Zoltan Balazs

How to hide your browser 0-daysZoltan Balazs

Hacking with Remote Admin Tools (RAT)Zoltan Balazs

How to hide your browser 0-day @ DisobeyZoltan Balazs

Recommandé

Sandbox detection: leak, abuse, test - Hacktivity 2015Zoltan Balazs

[ENG] OHM2013 - The Quest for the Client-Side Elixir Against Zombie Browsers - Zoltan Balazs

Ransomware - what is it, how to protect against itZoltan Balazs

Test & Tea : ITSEC testing, manual vs automatedZoltan Balazs

DEFCON 22: Bypass firewalls, application white lists, secure remote desktops ...Zoltan Balazs

How to hide your browser 0-daysZoltan Balazs

Hacking with Remote Admin Tools (RAT)Zoltan Balazs

How to hide your browser 0-day @ DisobeyZoltan Balazs

Attacker Ghost Stories (CarolinaCon / Area41 / RVASec)Rob Fuller

Practical Exploitation - Webappy StyleRob Fuller

Step by Step on How to Setup DarkCometPich Pra Tna

MIPS-XZoltan Balazs

[ENG] IPv6 shipworm + My little Windows domain pwnieZoltan Balazs

Explain Ethereum smart contract hacking like i am a fiveZoltan Balazs

0day hunting a.k.a. The story of a proper CPE testBalazs Bucsay

Playing with fuzz bunch and danderspritzDeepanshu Gajbhiye

Ultimate Guide to Setup DarkComet with NoIPPich Pra Tna

Attacker Ghost Stories - ShmooCon 2014Rob Fuller

Defcon 22-adrian-crenshaw-dropping-docs-on-darknets-how-peopPriyanka Aash

Malware Analysis For The EnterpriseJason Ross

Timisoara Wireless SurveyCristian Vat

Kochetova+osipv atm how_to_make_the_fraud__finalPacSecJP

Lucas apa pacsec slidesPacSecJP

CMS Hacking Tricks - DerbyCon 4 - 2014Greg Foss

Make CSRF AgainNetsparker

20+ Ways to Bypass Your macOS Privacy MechanismsSecuRing

BSides London 2017 - Hunt Or Be HuntedAlex Davies

MacdooredShakacon

[ Hackersuli ] Privacy on the blockchainZoltan Balazs

MLSEC 2020Zoltan Balazs

Contenu connexe

Tendances

Attacker Ghost Stories (CarolinaCon / Area41 / RVASec)Rob Fuller

Practical Exploitation - Webappy StyleRob Fuller

Step by Step on How to Setup DarkCometPich Pra Tna

MIPS-XZoltan Balazs

[ENG] IPv6 shipworm + My little Windows domain pwnieZoltan Balazs

Explain Ethereum smart contract hacking like i am a fiveZoltan Balazs

0day hunting a.k.a. The story of a proper CPE testBalazs Bucsay

Playing with fuzz bunch and danderspritzDeepanshu Gajbhiye

Ultimate Guide to Setup DarkComet with NoIPPich Pra Tna

Attacker Ghost Stories - ShmooCon 2014Rob Fuller

Defcon 22-adrian-crenshaw-dropping-docs-on-darknets-how-peopPriyanka Aash

Malware Analysis For The EnterpriseJason Ross

Timisoara Wireless SurveyCristian Vat

Kochetova+osipv atm how_to_make_the_fraud__finalPacSecJP

Lucas apa pacsec slidesPacSecJP

CMS Hacking Tricks - DerbyCon 4 - 2014Greg Foss

Make CSRF AgainNetsparker

20+ Ways to Bypass Your macOS Privacy MechanismsSecuRing

BSides London 2017 - Hunt Or Be HuntedAlex Davies

MacdooredShakacon

Tendances (20)

Attacker Ghost Stories (CarolinaCon / Area41 / RVASec)

Practical Exploitation - Webappy Style

Step by Step on How to Setup DarkComet

MIPS-X

[ENG] IPv6 shipworm + My little Windows domain pwnie

Explain Ethereum smart contract hacking like i am a five

0day hunting a.k.a. The story of a proper CPE test

Playing with fuzz bunch and danderspritz

Ultimate Guide to Setup DarkComet with NoIP

Attacker Ghost Stories - ShmooCon 2014

Defcon 22-adrian-crenshaw-dropping-docs-on-darknets-how-peop

Malware Analysis For The Enterprise

Timisoara Wireless Survey

Kochetova+osipv atm how_to_make_the_fraud__final

Lucas apa pacsec slides

CMS Hacking Tricks - DerbyCon 4 - 2014

Make CSRF Again

20+ Ways to Bypass Your macOS Privacy Mechanisms

BSides London 2017 - Hunt Or Be Hunted

Macdoored

Plus de Zoltan Balazs

[ Hackersuli ] Privacy on the blockchainZoltan Balazs

MLSEC 2020Zoltan Balazs

Web3 + scams = It's a matchZoltan Balazs

Hacktivity 2016: The real risks of the IoT security-nightmare: Hacking IP cam...Zoltan Balazs

IoT security is a nightmare. But what is the real risk?Zoltan Balazs

SandboxesZoltan Balazs

[ENG] Hacktivity 2013 - Alice in eXploitlandZoltan Balazs

[HUN] Védtelen böngészők - Ethical Hacking Zoltan Balazs

[ENG] Hacker halted 2012 - Zombie browsers, spiced with rootkit extensionsZoltan Balazs

[ENG] Zombie browsers spiced with rootkit extensions - Hacktivity 2012Zoltan Balazs

[HUN] Zombi tűzróka, avagy mire képes egy rosszindulatú böngősző kiegészitőZoltan Balazs

[HUN] Hacktivity2009 - M&M’s: Mafia & Malware’sZoltan Balazs

Plus de Zoltan Balazs (12)

[ Hackersuli ] Privacy on the blockchain

MLSEC 2020

Web3 + scams = It's a match

Hacktivity 2016: The real risks of the IoT security-nightmare: Hacking IP cam...

IoT security is a nightmare. But what is the real risk?

Sandboxes

[ENG] Hacktivity 2013 - Alice in eXploitland

[HUN] Védtelen böngészők - Ethical Hacking

[ENG] Hacker halted 2012 - Zombie browsers, spiced with rootkit extensions

[ENG] Zombie browsers spiced with rootkit extensions - Hacktivity 2012

[HUN] Zombi tűzróka, avagy mire képes egy rosszindulatú böngősző kiegészitő

[HUN] Hacktivity2009 - M&M’s: Mafia & Malware’s

Dernier

Busty Desi⚡Call Girls in Vasundhara Ghaziabad >༒8448380779 Escort ServiceDelhi Call girls

20240510 QFM016 Irresponsible AI Reading List April 2024.pdfMatthew Sinclair

Katraj ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready For S...tanu pandey

(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7Call Girls in Nagpur High Profile Call Girls

Call Girls Sangvi Call Me 7737669865 Budget Friendly No Advance BookingCall G...roncy bisnoi

( Pune ) VIP Pimpri Chinchwad Call Girls 🎗️ 9352988975 Sizzling | Escorts | G...nilamkumrai

Call Now ☎ 8264348440 !! Call Girls in Green Park Escort Service Delhi N.C.R.soniya singh

VIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 Bookingdharasingh5698

APNIC Updates presented by Paul Wilson at ARIN 53APNIC

Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...SUHANI PANDEY

Call Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service AvailableSeo

20240509 QFM015 Engineering Leadership Reading List April 2024.pdfMatthew Sinclair

VVIP Pune Call Girls Sinhagad WhatSapp Number 8005736733 With Elite Staff And...SUHANI PANDEY

Dubai=Desi Dubai Call Girls O525547819 Outdoor Call Girls Dubaikojalkojal131

( Pune ) VIP Baner Call Girls 🎗️ 9352988975 Sizzling | Escorts | Girls Are Re...nilamkumrai

Lucknow ❤CALL GIRL 88759*99948 ❤CALL GIRLS IN Lucknow ESCORT SERVICE❤CALL GIRLimonikaupta

Russian Call Girls in %(+971524965298 )# Call Girls in DubaiDubai call girls 971524965298 Call girls in Bur Dubai

📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱@Chandigarh #call #Girls 9053900678 @Call #Girls in @Punjab 9053900678

"Boost Your Digital Presence: Partner with a Leading SEO Agency"growthgrids

在线制作约克大学毕业证（yu毕业证）在读证明认证可查ydyuyu

Dernier (20)

Busty Desi⚡Call Girls in Vasundhara Ghaziabad >༒8448380779 Escort Service

20240510 QFM016 Irresponsible AI Reading List April 2024.pdf

Katraj ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready For S...

(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7

Call Girls Sangvi Call Me 7737669865 Budget Friendly No Advance BookingCall G...

( Pune ) VIP Pimpri Chinchwad Call Girls 🎗️ 9352988975 Sizzling | Escorts | G...

Call Now ☎ 8264348440 !! Call Girls in Green Park Escort Service Delhi N.C.R.

VIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 Booking

APNIC Updates presented by Paul Wilson at ARIN 53

Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...

Call Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service Available

20240509 QFM015 Engineering Leadership Reading List April 2024.pdf

VVIP Pune Call Girls Sinhagad WhatSapp Number 8005736733 With Elite Staff And...

Dubai=Desi Dubai Call Girls O525547819 Outdoor Call Girls Dubai

( Pune ) VIP Baner Call Girls 🎗️ 9352988975 Sizzling | Escorts | Girls Are Re...

Lucknow ❤CALL GIRL 88759*99948 ❤CALL GIRLS IN Lucknow ESCORT SERVICE❤CALL GIRL

Russian Call Girls in %(+971524965298 )# Call Girls in Dubai

📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱

"Boost Your Digital Presence: Partner with a Leading SEO Agency"

在线制作约克大学毕业证（yu毕业证）在读证明认证可查

Hacking Windows 95 #33c3

1. How to hack Windows 95 Zoltan Balazs MRG Effitas 33C3

3. How did I get into this? Hack Win95 at a CTF Could not hack it during the CTF time limit My goal • Hack it with existing tools (ain’t nobody got time for 0days) • Remote code exec • No user interaction Hack prerequisites • Default Win95 • C: writable share • Networking configured

4. https://web.archive.org/web/20060307153224/http://www.netxeyes.org/Fluxay5Manaul.pdf - 158 page of manual !!!! Banyet Soft Labs, 2002?

9. Hack The Planet! https://www.youtube.com/watch?v=x5Yt5UjLR1w https://jumpespjump.blogspot.hu/2014/02/hacking-windows-95-part-1.html https://jumpespjump.blogspot.hu/2014/05/hacking-windows-95-part-2.html zoltan.balazs@mrg-effitas.com @zh4ck JumpESPJump.blogspot.com Greetz to @CrySySLab, @SpamAndHex