Really cool hacks and attacks on MD5, PKI, Windows, Linux and cloud services

•

3 j'aime•1,097 vues

Presentation by Marco Slaviero at the University of Pretoria to the Tuks Linux User Group in 2010. The aim of this presentation is to promote information security. The presentation begins with a look at a few recent attacks. Cloud computing is briefly discussed. The presentation ends with a discussion on Amazon web services and its security.

Technologie

Attacks and defences Or, really cool hacks ,[object Object]

About Us ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Why this talk? ,[object Object],[object Object],[object Object],[object Object]

x509 attack: MD5 ,[object Object],[object Object],[object Object],[object Object]

x509 attack: MD5 ,[object Object],[object Object],[object Object]

x509 attack: MD5 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

x509 attack: CN ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

x509 attack: CN ,[object Object],[object Object]

x509 attack: CN ,[object Object],[object Object],[object Object],[object Object],[object Object]

Validating the cert ,[object Object],[object Object],[object Object],[object Object],[object Object]

PKI attacks: cert checking ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

PKI attacks: cert checking ,[object Object],[object Object]

Win32: privilege escalation ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Win32: 8086 simulator ,[object Object],[object Object],[object Object],[object Object],[object Object]

Win32: exploit description ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

FreeBSD: rtld ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

FreeBSD: rtld code ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

FreeBSD: rtld ,[object Object],[object Object],[object Object],[object Object],[object Object]

e107 Backdoor ,[object Object],[object Object],[object Object],[object Object],[object Object]

e107: backdoor code ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

e107 Backdoor ,[object Object],[object Object]

Let’s talk cloud computing ,[object Object]

What drives cloud adoption? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Problems with cloud testing ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

BlackHat talk summary ,[object Object],[object Object],[object Object]

Amazon EC2 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Danger ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Can we get someone to run our machine? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

But there’s more ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

What other cloud hacks? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Linux ,[object Object],[object Object],[object Object],[object Object],[object Object]

Questions? [email_address] ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Attendees / speakers welcome Great venue for 1st-time speakers Look out for announcements.

Recommandé

Small Python Tools for Software Release Engineeringpycontw

Codetainer: a Docker-based browser code 'sandbox'Jen Andre

Infrastructureascode slideshare-160331143725miguel dominguez

Threat stack awsJen Andre

sponsorAVAST-VB2014Martin Hron

Richard wartell malware is hard. let's go shopping!!Shakacon

For the Greater Good: Leveraging VMware's RPC Interface for fun and profit by...CODE BLUE

Windows Kernel Exploitation : This Time Font hunt you down in 4 bytesPeter Hlavaty

Recommandé

Small Python Tools for Software Release Engineeringpycontw

Codetainer: a Docker-based browser code 'sandbox'Jen Andre

Infrastructureascode slideshare-160331143725miguel dominguez

Threat stack awsJen Andre

sponsorAVAST-VB2014Martin Hron

Richard wartell malware is hard. let's go shopping!!Shakacon

For the Greater Good: Leveraging VMware's RPC Interface for fun and profit by...CODE BLUE

Windows Kernel Exploitation : This Time Font hunt you down in 4 bytesPeter Hlavaty

PowerShell Inside Out: Applied .NET Hacking for Enhanced Visibility by Satosh...CODE BLUE

Defcon 22-colby-moore-patrick-wardle-synack-drop camPriyanka Aash

Introduction of ShinoBOT (Black Hat USA 2013 Arsenal)Shota Shinogi

Vulnerability desing patternsPeter Hlavaty

TENTACLE: Environment-Sensitive Malware Palpation(PacSec 2014)FFRI, Inc.

digitalSTROM Developer Day 2011: Wie Heimelektronik und digitalSTROM zusammen...digitalSTROM.org

Stealthy, Hypervisor-based Malware AnalysisTamas K Lengyel

DEF CON 27 - workshop ANTHONY ROSE - introduction to amsi bypasses and sandbo...Felipe Prado

Docker app armor_usecaseKazuki Omo

You didnt see it’s coming? "Dawn of hardened Windows Kernel" Peter Hlavaty

Rainbow Over the Windows: More Colors Than You Could ExpectPeter Hlavaty

Defcon 29 Adversary Village: PurpleSharp - Automated Adversary SimulationMauricio Velazco

Possibility of arbitrary code execution by Step-Oriented Programmingkozossakai

Guardians of your CODEPeter Hlavaty

Take a Jailbreak -Stunning Guards for iOS Jailbreak- by Kaoru OtsukaCODE BLUE

Nagios Conference 2011 - Mike Weber - Training: Monitoring Linux Mail Servers...Nagios

Hernan Ochoa - WCE Internals [RootedCON 2011]RootedCON

Современные технологии и инструменты анализа вредоносного ПО_PHDays_2017_Pisk...Ivan Piskunov

Exploiting buffer overflowsPaul Dutot IEng MIET MBCS CITP OSCP CSTM

[CB19] Attacking DRM subsystem to gain kernel privilege on Chromebooks by Di ...CODE BLUE

Holistic Healing Youth Development ProgramSRIKRISHAN Sharma

Torana School PhotosInfotrex Services Pvt. Ltd.

Contenu connexe

Tendances

PowerShell Inside Out: Applied .NET Hacking for Enhanced Visibility by Satosh...CODE BLUE

Defcon 22-colby-moore-patrick-wardle-synack-drop camPriyanka Aash

Introduction of ShinoBOT (Black Hat USA 2013 Arsenal)Shota Shinogi

Vulnerability desing patternsPeter Hlavaty

TENTACLE: Environment-Sensitive Malware Palpation(PacSec 2014)FFRI, Inc.

digitalSTROM Developer Day 2011: Wie Heimelektronik und digitalSTROM zusammen...digitalSTROM.org

Stealthy, Hypervisor-based Malware AnalysisTamas K Lengyel

DEF CON 27 - workshop ANTHONY ROSE - introduction to amsi bypasses and sandbo...Felipe Prado

Docker app armor_usecaseKazuki Omo

You didnt see it’s coming? "Dawn of hardened Windows Kernel" Peter Hlavaty

Rainbow Over the Windows: More Colors Than You Could ExpectPeter Hlavaty

Defcon 29 Adversary Village: PurpleSharp - Automated Adversary SimulationMauricio Velazco

Possibility of arbitrary code execution by Step-Oriented Programmingkozossakai

Guardians of your CODEPeter Hlavaty

Take a Jailbreak -Stunning Guards for iOS Jailbreak- by Kaoru OtsukaCODE BLUE

Nagios Conference 2011 - Mike Weber - Training: Monitoring Linux Mail Servers...Nagios

Hernan Ochoa - WCE Internals [RootedCON 2011]RootedCON

Современные технологии и инструменты анализа вредоносного ПО_PHDays_2017_Pisk...Ivan Piskunov

Exploiting buffer overflowsPaul Dutot IEng MIET MBCS CITP OSCP CSTM

[CB19] Attacking DRM subsystem to gain kernel privilege on Chromebooks by Di ...CODE BLUE

Tendances (20)

PowerShell Inside Out: Applied .NET Hacking for Enhanced Visibility by Satosh...

Defcon 22-colby-moore-patrick-wardle-synack-drop cam

Introduction of ShinoBOT (Black Hat USA 2013 Arsenal)

Vulnerability desing patterns

TENTACLE: Environment-Sensitive Malware Palpation(PacSec 2014)

digitalSTROM Developer Day 2011: Wie Heimelektronik und digitalSTROM zusammen...

Stealthy, Hypervisor-based Malware Analysis

DEF CON 27 - workshop ANTHONY ROSE - introduction to amsi bypasses and sandbo...

Docker app armor_usecase

You didnt see it’s coming? "Dawn of hardened Windows Kernel"

Rainbow Over the Windows: More Colors Than You Could Expect

Defcon 29 Adversary Village: PurpleSharp - Automated Adversary Simulation

Possibility of arbitrary code execution by Step-Oriented Programming

Guardians of your CODE

Take a Jailbreak -Stunning Guards for iOS Jailbreak- by Kaoru Otsuka

Nagios Conference 2011 - Mike Weber - Training: Monitoring Linux Mail Servers...

Hernan Ochoa - WCE Internals [RootedCON 2011]

Современные технологии и инструменты анализа вредоносного ПО_PHDays_2017_Pisk...

Exploiting buffer overflows

[CB19] Attacking DRM subsystem to gain kernel privilege on Chromebooks by Di ...

En vedette

Holistic Healing Youth Development ProgramSRIKRISHAN Sharma

Torana School PhotosInfotrex Services Pvt. Ltd.

Can Personalized Medicine Save the Health Care System?Leonard Davis Institute of Health Economics

1siantar_man

Health promotion and integrative health care alternative budget proposalCollege of Medicine, University of the Philippines Manila

Unit%202%20 %20 Community%20 Health%20 Nursing%20system%20and%20processgangpark3

Integrative Medicine Yoga MeditationMedicineAndHealthNeurolog

female feticide/Save girl childParas Pareek

Sanitation and hygiene promotion programming guidanceSekretariat Nasional

Sea Defences Revisiondonotreply16

Defences to crimeCawthra Park Secondary School

Overview Of Naturopathic Medicinejmckenziend

Allopathy vs homeopathy vs ayurvedaHealthmania Circle

Central council for health an family welfareSabeena Sasidharan

Meditation power pointtechno UCH

Effects Of Yoga And Meditationtsoal

Nationals policies,Plans,and Programme , Community Health Nursing India Paul Ebenezer

Indian adoption lawsAltacit Global

Basic Principal Of Naturopathyumashankar

Yoga and meditation lectureMaureen Spencer, RN, M.Ed.

En vedette (20)

Holistic Healing Youth Development Program

Torana School Photos

Can Personalized Medicine Save the Health Care System?

Health promotion and integrative health care alternative budget proposal

Unit%202%20 %20 Community%20 Health%20 Nursing%20system%20and%20process

Integrative Medicine Yoga Meditation

female feticide/Save girl child

Sanitation and hygiene promotion programming guidance

Sea Defences Revision

Defences to crime

Overview Of Naturopathic Medicine

Allopathy vs homeopathy vs ayurveda

Central council for health an family welfare

Meditation power point

Effects Of Yoga And Meditation

Nationals policies,Plans,and Programme , Community Health Nursing India

Indian adoption laws

Basic Principal Of Naturopathy

Yoga and meditation lecture

Similaire à Really cool hacks and attacks on MD5, PKI, Windows, Linux and cloud services

Inside the Matrix,How to Build Transparent Sandbox for Malware AnalysisChong-Kuan Chen

Serverless security: defence against the dark artsYan Cui

Reversing & Malware Analysis Training Part 9 - Advanced Malware Analysissecurityxploded

DEF CON 27 - workshop ANTHONY ROSE - introduction to amsi bypasses and sandbo...Felipe Prado

DTS Solution - Yehia Mamdouh - Release your pet worm on your infrastructure....Shah Sheikh

Ransomware for fun and non-profitYouness Zougar

Security in serverless worldYan Cui

Sembang2 Keselamatan It 2004Linuxmalaysia Malaysia

Understand studyAntonio Costa aka Cooler_

Lab-10 Malware Creation and Denial of Service (DoS) In t.docxpauline234567

The Good The Bad The VirtualClaudio Criscione

Microarmy - by J2 LabsJames Dennis

Chasing the Adder. A tale from the APT world...Stefano Maccaglia

Defending Against Attacks With RailsTony Amoyal

Gartner Security & Risk Management Summit 2018Paula Januszkiewicz

[Confidence0902] The Glass Cage - Virtualization SecurityClaudio Criscione

Security & ethical hackingAmanpreet Singh

Advanced System Security and Digital ForensicsDr. Ramchandra Mangrulkar

CEHv10 M0 Introduction.pptxYasserOuda2

Unmasking or De-Anonymizing YouE Hacking

Similaire à Really cool hacks and attacks on MD5, PKI, Windows, Linux and cloud services (20)

Inside the Matrix,How to Build Transparent Sandbox for Malware Analysis

Serverless security: defence against the dark arts

Reversing & Malware Analysis Training Part 9 - Advanced Malware Analysis

DEF CON 27 - workshop ANTHONY ROSE - introduction to amsi bypasses and sandbo...

DTS Solution - Yehia Mamdouh - Release your pet worm on your infrastructure....

Ransomware for fun and non-profit

Security in serverless world

Sembang2 Keselamatan It 2004

Understand study

Lab-10 Malware Creation and Denial of Service (DoS) In t.docx

The Good The Bad The Virtual

Microarmy - by J2 Labs

Chasing the Adder. A tale from the APT world...

Defending Against Attacks With Rails

Gartner Security & Risk Management Summit 2018

[Confidence0902] The Glass Cage - Virtualization Security

Security & ethical hacking

Advanced System Security and Digital Forensics

CEHv10 M0 Introduction.pptx

Unmasking or De-Anonymizing You

Plus de SensePost

objection - runtime mobile explorationSensePost

Vulnerabilities in TN3270 based ApplicationSensePost

Ruler and Liniaal @ Troopers 17SensePost

Introducing (DET) the Data Exfiltration ToolkitSensePost

ZaCon 2015 - Zombie Mana AttacksSensePost

Improvement in Rogue Access Points - SensePost Defcon 22SensePost

Heartbleed OverviewSensePost

Botconf 2013 - DNS-based Botnet C2 Server DetectionSensePost

Rat a-tat-tatSensePost

Hacking Z-Wave Home Automation SystemsSensePost

Offence oriented DefenceSensePost

Threats to machine cloudsSensePost

Inside .NET Smart Card Operating SystemSensePost

SNMP : Simple Network Mediated (Cisco) PwnageSensePost

Its Ok To Get HackedSensePost

Web Application HackingSensePost

Putting the tea back into cyber terrorismSensePost

Major global information security trends - a summarySensePost

Corporate Threat Modeling v2SensePost

State of the information security nationSensePost

Plus de SensePost (20)

objection - runtime mobile exploration

Vulnerabilities in TN3270 based Application

Ruler and Liniaal @ Troopers 17

Introducing (DET) the Data Exfiltration Toolkit

ZaCon 2015 - Zombie Mana Attacks

Improvement in Rogue Access Points - SensePost Defcon 22

Heartbleed Overview

Botconf 2013 - DNS-based Botnet C2 Server Detection

Rat a-tat-tat

Hacking Z-Wave Home Automation Systems

Offence oriented Defence

Threats to machine clouds

Inside .NET Smart Card Operating System

SNMP : Simple Network Mediated (Cisco) Pwnage

Its Ok To Get Hacked

Web Application Hacking

Putting the tea back into cyber terrorism

Major global information security trends - a summary

Corporate Threat Modeling v2

State of the information security nation

Dernier

Streamlining Python Development: A Guide to a Modern Project SetupFlorian Wilhelm

The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptxLoriGlavin3

Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)Mark Simos

Merck Moving Beyond Passwords: FIDO Paris Seminar.pptxLoriGlavin3

unit 4 immunoblotting technique complete.pptxBkGupta21

SALESFORCE EDUCATION CLOUD | FEXLE SERVICESmohitsingh558521

What is DBT - The Ultimate Data Build Tool.pdfMounikaPolabathina

WordPress Websites for Engineers: Elevate Your Brandgvaughan

Nell’iperspazio con Rocket: il Framework Web di Rust!Commit University

Unraveling Multimodality with Large Language Models.pdfAlex Barbosa Coqueiro

New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024BookNet Canada

Are Multi-Cloud and Serverless Good or Bad?Mattias Andersson

Ensuring Technical Readiness For Copilot in Microsoft 3652toLead Limited

Advanced Computer Architecture – An IntroductionDilum Bandara

What's New in Teams Calling, Meetings and Devices March 2024Stephanie Beckett

New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024BookNet Canada

Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptxLoriGlavin3

Gen AI in Business - Global Trends Report 2024.pdfAddepto

"Debugging python applications inside k8s environment", Andrii SoldatenkoFwdays

Scanning the Internet for External Cloud Exposures via SSL CertsRizwan Syed

Dernier (20)

Streamlining Python Development: A Guide to a Modern Project Setup

The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx

Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)

Merck Moving Beyond Passwords: FIDO Paris Seminar.pptx

unit 4 immunoblotting technique complete.pptx

SALESFORCE EDUCATION CLOUD | FEXLE SERVICES

What is DBT - The Ultimate Data Build Tool.pdf

WordPress Websites for Engineers: Elevate Your Brand

Nell’iperspazio con Rocket: il Framework Web di Rust!

Unraveling Multimodality with Large Language Models.pdf

New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024

Are Multi-Cloud and Serverless Good or Bad?

Ensuring Technical Readiness For Copilot in Microsoft 365

Advanced Computer Architecture – An Introduction

What's New in Teams Calling, Meetings and Devices March 2024

New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024

Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptx

Gen AI in Business - Global Trends Report 2024.pdf

"Debugging python applications inside k8s environment", Andrii Soldatenko

Scanning the Internet for External Cloud Exposures via SSL Certs

Really cool hacks and attacks on MD5, PKI, Windows, Linux and cloud services

4. x509 and MD5

10.

11.

12. x509 and the CN

13.

14.

15.

16.

17.

18.

19.

20. Win32 ring3 -> ring0

21.

22.

23.

24. Win32 demo

25. FreeBSD rtld

26.

27.

28.

29. FreeBSD demo

30. e107 Backdoor

31.

32.

33.

34.

35.

36. So, what exactly *is* the cloud?

37.

38.

39.

40.

41.

42. Yes, it’s that cool...

43.

44.

45.

46.

47.

48.

49.

50. Linux bugs (it’s TLUG)

51.

52. Linux demo

53.