44CON 2014 - Advanced Excel Hacking, Didier Stevens

•

4 recomendaciones•1,976 vistas

44CON 2014 - Advanced Excel Hacking, Didier Stevens This is a workshop on hacking Excel on Windows without exploits. Visual Basic for Applications (VBA) is a powerful programming language, more powerful than VBScript, because it has access to the Windows API. What I teach in this workshop is applicable to all applications with VBA support (Word, Powerpoint, AutoCAD, …), but I choose Excel because of its prevalence and its tabular GUI that is particularly suited for inputting and outputting data. I illustrate 2 major hacking techniques on Excel: pure VBA and VBA mixed with with special shellcode and DLLs.

Advanced Excel Hacking Workshop
Didier Stevens
http://.DidierStevens.com/excel.zip

No Exploits
Just Features

Unzip excel.zip to c:excel
Password: Workshop

VBA (Visual Basic for Applications)
is a complete Windows programming language

VBS (Visual Basic Script)
is NOT a complete Windows programming
language

VBA has access to the Windows API

VBA: MS Office (Word, Excel Powerpoint, …),
AutoCAD, ...

Excel: what I prefer as a User Interface

Exercise 1:
“Hello World” message box with VBA

VBA7
Introduced with Office 2010
Support for 64-bit

32-bit Excel or 64-bit Excel?

Excel 2007 or earlier: 32-bit

Excel 2010 or 2013:
Check File/Help

3 new VBA7 keywords:
PtrSafe
LongLong
LongPtr

2 new VBA7 compilation constants
VBA7
Win64

I use Win64
If Win64 is defined, I know that I'm using VBA7 on
a 64-bit application
Thus I use the new keywords
(PtrSafe, LongLong, LongPtr)

If Win64 is not defined, I know that I am on 32-bit
application.
And then I DO NOT use the new keywords.

Exercise 2:
“Hello World” message box with API
32-bit, 64-bit & both

API functions:
not only basic types as arguments,
but also structures

Private Declare PtrSafe Sub GetSystemTime Lib
"kernel32.dll" (st As SYSTEMTIME)

Private Type SYSTEMTIME
wYear As Integer
wMonth As Integer
wDayOfWeek As Integer
wDay As Integer
wHour As Integer
wMinute As Integer
wSecond As Integer
wMilliseconds As Integer
End Type

Exercise 3:
GetSystemTime
32-bit, 64-bit & both

InstalledPrograms

NetworkMashup-32

TaskManager.xls / TaskManagerSC.xls

Problem: writing a lot of VBA code

Datapipe

Modify C source code datapipe
datapipe.exe → datapipe.dll

DLL to shellcode
CreateMemoryModuleShellCode.py datapipe-dll.
dll datapipe-dll.dll.bin

Shellcode to VBA
shellcode2vba.py datapipe-dll.dll.bin datapipe-dll.
dll.bin.base64.vba

ReactOS cmd and regedit

Putty

20% discount sale for Brucon:
PDF Analysis workshop videos on CD: €20
White Hat Shellcode workshop videos on CD: €20
x64 workshop videos on CD: €20
All videos on CD: €50
http://DidierStevensLabs.com

Más contenido relacionado

Similar a 44CON 2014 - Advanced Excel Hacking, Didier Stevens

Viva64 - is a tool for searching of errors and possible problems at C/C ++ code at the applications port on the 64-bit platform. Nowadays when the necessity of the 64-bit versions software output is realized by the most of the developers, it is too important to be sure of the working up product quality. Even if the traditional 32-bit version of your product has been tested carefully, its portability on the 64-bit platform may reveal some unexpected problems. Some separate items are devoted to the applications portability problems, and this one tells how to provide the necessary level of the code quality with the help the static analyzer Viva64.

Viva64: working up of 64-bit applications

Viva64: working up of 64-bit applications

Viva64: working up of 64-bit applications

Conference: Engage 2024 in Antwerp Type: Development – Session Speakers: Julian Robichaux Title: How to Prepare Applications for Notes 64-bit Clients Abstract: Why 64-bit? Do you need it? Is it painful to switch? Will your applications stop working? Do you have to rewrite everything? Will the new Java 17 break things? We have the answers to these questions and more! Spoiler warning: 64-bit clients are here, and your applications are not ready. But not to worry; everything is fixable. Join this session with Julian Robichaux from panagenda to find out how. He will guide you through this journey and give you all the tools, tips, and tricks you need to outmaneuver any dangers and pitfalls. Get started today! Dive into these 64-bit topics: + HCL guidelines for updating applications + LotusScript: known issues, patterns to look for, debugger bugs, compiling with older Designers + API calls: parameters, dealing with structs, NotesSession.UseDoubleAsPointer + Java: Java 17, added/removed functionalities, compiler settings, XPages + Eclipse plugins

De05_panagenda_Prepare-Applications-for-64-bit-Clients.pdf

De05_panagenda_Prepare-Applications-for-64-bit-Clients.pdf

De05_panagenda_Prepare-Applications-for-64-bit-Clients.pdf

Bt0082 visual basic

Bt0082 visual basic

Bt0082 visual basic

01. introduction to-programming

01. introduction to-programming

01. introduction to-programming

Webinar Recording: https://www.panagenda.com/webinars/developer-special-how-to-prepare-applications-for-notes-64-bit-clients/ Why 64-bit? Do you need it? Is it painful to switch? Will your applications stop working? Do you have to rewrite everything? Will the new Java 17 break things? We have the answers to these questions and more! Spoiler warning: 64-bit clients are coming, and your applications are not ready. But not to worry; everything is fixable. Join this webinar special with Notes development legend and HCL Lifetime Ambassador Julian Robichaux to find out. He will guide you through this journey and give you all the tools, tips, and tricks you need to outmaneuver any dangers and pitfalls. Get started today! Dive into these 64-bit topics - HCL guidelines for updating applications - LotusScript: known issues, patterns to look for, debugger bugs, compiling with older Designers - API calls: parameters, dealing with structs, NotesSession.UseDoubleAsPointer - Java: Java 17, added/removed functionalities, compiler settings, XPages - Eclipse plugins

Developer Special: How to Prepare Applications for Notes 64-bit Clients

Developer Special: How to Prepare Applications for Notes 64-bit Clients

Developer Special: How to Prepare Applications for Notes 64-bit Clients

OpenWhisk by Example - Auto Retweeting Example in Python

OpenWhisk by Example - Auto Retweeting Example in Python

OpenWhisk by Example - Auto Retweeting Example in Python

CodeOps Technologies LLP

Introduction to Programming Lesson 01

Introduction to Programming Lesson 01

Introduction to Programming Lesson 01

A-Tech and Software Development

What's New in Visual Studio 2008

What's New in Visual Studio 2008

What's New in Visual Studio 2008

Acend Corporate Learning

PT1420: File Access and Visual Basic Page 1 This lab examines how to work with a file by writing Visual Basic code. Read the following programming problem prior to completing the lab. Write and design a simple program that will take 3 pieces of data and write it to a file. Create variables and set them equal to the appropriate values: Declare string firstName = “xxx” Declare string lastName = “xxx” Declare integer age = your age Write this information to a file called myRecords.txt. Next, read this information from the file and print it to the screen. Step 1: Create a new Visual Basic workspace and add the following code: Module Module1 Sub Main() Dim firstName As String = "XXXX" Dim lastName As String = "XXX" Dim age As Integer = #### Dim writer As System.IO.StreamWriter = System.IO.File.CreateText("myRecords.txt") writer.WriteLine(firstName & " " & lastName & " " & age) writer.Close() Dim reader As System.IO.StreamReader = System.IO.File.OpenText("myRecords.txt") Dim myInfo As String = reader.ReadLine() Console.WriteLine(myInfo) PT1420: File Access and Visual Basic Page 2 reader.Close() 'this causes a pause so you can see your program Console.Write("Press enter to continue...") Console.ReadLine() End Sub End Module Your module looks like this: PT1420: File Access and Visual Basic Page 3 Step 2: Change the values of the variables to your records. Your module looks like this: Step 3: Run your program so that it works properly. Your output might look as follows: PT1420: File Access and Visual Basic Page 4 Step 4: Locate the .txt file in the bin\debug folder, and view your .txt file. Your output might look as follows: PT1420: File Access and Visual Basic Page 5 Step 5: Submit the Visual Basic code as a compressed (zipped) folder using the following steps: a. Open Windows Explorer --> Start --> All Programs --> Accessories --> Windows Explorer. Your Windows Explorer might look as follows: ...

PT1420 File Access and Visual Basic .docx

PT1420 File Access and Visual Basic .docx

PT1420 File Access and Visual Basic .docx

Unit -II Introduction to visual programming.pdf

Unit -II Introduction to visual programming.pdf

Unit -II Introduction to visual programming.pdf

Ujwala Junghare

01 Introduction to programming

01 Introduction to programming

01 Introduction to programming

A Dictionary Of Vb .Net

A Dictionary Of Vb .Net

A Dictionary Of Vb .Net

Static code analysis and the new language standard C++0x

Static code analysis and the new language standard C++0x

Static code analysis and the new language standard C++0x

Static code analysis and the new language standard C++0x

Static code analysis and the new language standard C++0x

Static code analysis and the new language standard C++0x

ASSIGNMENT

Simranjeet Kaur

Even if you correct all compilation errors and warnings, it does not mean that a 64-bit application will work well. So it is the description and diagnosis of 64-bit errors that we will deal with in the most lessons of our course. And one more thing - do not rely on the switch /Wp64 which is described by many people (often unreasonably) in forum discussions as a wonderful tool able to find 64-bit errors.

Lesson 6. Errors in 64-bit code

Lesson 6. Errors in 64-bit code

Lesson 6. Errors in 64-bit code

64 bits, Wp64, Visual Studio 2008, Viva64 and all the rest...

64 bits, Wp64, Visual Studio 2008, Viva64 and all the rest...

64 bits, Wp64, Visual Studio 2008, Viva64 and all the rest...

A Collection of Examples of 64-bit Errors in Real Programs

A Collection of Examples of 64-bit Errors in Real Programs

A Collection of Examples of 64-bit Errors in Real Programs

C tutorials

The coming of 64-bit processors to the PC market causes a problem which the developers have to solve: the old 32-bit applications should be ported to the new platform. After such code migration an application may behave incorrectly. The article is elucidating question of development and appliance of static code analyzer for checking out of the correctness of such application. Some problems emerging in applications after recompiling in 64-bit systems are considered in this article as well as the rules according to which the code check up is performed.

Static code analysis for verification of the 64-bit applications

Static code analysis for verification of the 64-bit applications

Static code analysis for verification of the 64-bit applications

Similar a 44CON 2014 - Advanced Excel Hacking, Didier Stevens (20)

Viva64: working up of 64-bit applications

Viva64: working up of 64-bit applications

Viva64: working up of 64-bit applications

De05_panagenda_Prepare-Applications-for-64-bit-Clients.pdf

De05_panagenda_Prepare-Applications-for-64-bit-Clients.pdf

De05_panagenda_Prepare-Applications-for-64-bit-Clients.pdf

Bt0082 visual basic

Bt0082 visual basic

Bt0082 visual basic

01. introduction to-programming

01. introduction to-programming

01. introduction to-programming

Developer Special: How to Prepare Applications for Notes 64-bit Clients

Developer Special: How to Prepare Applications for Notes 64-bit Clients

Developer Special: How to Prepare Applications for Notes 64-bit Clients

OpenWhisk by Example - Auto Retweeting Example in Python

OpenWhisk by Example - Auto Retweeting Example in Python

OpenWhisk by Example - Auto Retweeting Example in Python

Introduction to Programming Lesson 01

Introduction to Programming Lesson 01

Introduction to Programming Lesson 01

What's New in Visual Studio 2008

What's New in Visual Studio 2008

What's New in Visual Studio 2008

PT1420 File Access and Visual Basic .docx

PT1420 File Access and Visual Basic .docx

PT1420 File Access and Visual Basic .docx

Unit -II Introduction to visual programming.pdf

Unit -II Introduction to visual programming.pdf

Unit -II Introduction to visual programming.pdf

01 Introduction to programming

01 Introduction to programming

01 Introduction to programming

A Dictionary Of Vb .Net

A Dictionary Of Vb .Net

A Dictionary Of Vb .Net

Static code analysis and the new language standard C++0x

Static code analysis and the new language standard C++0x

Static code analysis and the new language standard C++0x

Static code analysis and the new language standard C++0x

Static code analysis and the new language standard C++0x

Static code analysis and the new language standard C++0x

ASSIGNMENT

Lesson 6. Errors in 64-bit code

Lesson 6. Errors in 64-bit code

Lesson 6. Errors in 64-bit code

64 bits, Wp64, Visual Studio 2008, Viva64 and all the rest...

64 bits, Wp64, Visual Studio 2008, Viva64 and all the rest...

64 bits, Wp64, Visual Studio 2008, Viva64 and all the rest...

A Collection of Examples of 64-bit Errors in Real Programs

A Collection of Examples of 64-bit Errors in Real Programs

A Collection of Examples of 64-bit Errors in Real Programs

C tutorials

Static code analysis for verification of the 64-bit applications

Static code analysis for verification of the 64-bit applications

Static code analysis for verification of the 64-bit applications

Más de 44CON

Your job is to secure operations. But nobody listens to you. There’s no budget. Management keeps making bad security decisions that seem to sabotage your efforts. Do you flee or do you try harder? The security books, blogs, and tweeting pundits out there tell us we need to learn the language of business. We need to put risk in terms of money that management understands. We need to be like the management we’re trying to protect. And that’s where it all falls apart. The security to business relationship is often textbook abusive codependency. You do well and nobody notices. You fail and you get fired or worse- shamed by your peers over social media for whatever the company releases as the statement for the breach. So how do you do SecOps under those conditions? This talk will focus on new ways to approach SecOps to face the challenges you have today with business demands. We will look at new security research that will make a difference for how you do your job. Most of all we will show you technical security practices to help you sustain your new found stance.

They're All Scorpions - Successful SecOps in a Hostile Workplace - Pete Herzo...

They're All Scorpions - Successful SecOps in a Hostile Workplace - Pete Herzo...

They're All Scorpions - Successful SecOps in a Hostile Workplace - Pete Herzo...

One of the hottest topics in current crypto research is Post-Quantum Cryptography. This branch of cryptography addresses asymmetric crypto systems that are not prone to quantum computers. Virtually all asymmetric crypto systems currently in use (Diffie-Hellman, RSA, DSA, and Elliptic Curve Crypto Systems) are not Post-Quantum. They will be useless, once advanced quantum computers will be available. Quantum computer technology has made considerable progress in recent years, with major organisations, like Google, NSA, and NASA, investing in it. Post-Quantum Cryptography uses advanced mathematical concepts. Even if one knows the basics of current asymmetric cryptography (integer factorisation, discrete logarithms, …), Post-Quantum algorithms are hard to understand. The goal of this presentation is to explain Post-Quantum Cryptography in a way that is comprehensible for non-mathematicians. Five families of crypto systems (as good as all known Post-Quantum algorithms belong to these) will be introduced: Lattice-based systems: The concept of lattice-based asymmetric encryption will be explained with a two-dimensional grid (real-world implementations use 250 dimensions and more). Some lattice-based ciphers (e.g., New Hope) make use of the Learning with Error (LWE) concept. I will demonstrate LWE encryption in a way that is understandable to somebody who knows Gaussian elimination (this is taught at middle school). Other lattice-based systems (especially NTRU) use truncated polynomials, which I will also explain in a simple way. Code-based systems: McEliece and a few other asymmetric ciphers are based on error correction codes. While teaching the whole McEliece algorithm might be too complex for a 44CON presentation, it is certainly possible to explain error correction codes and the main McEliece fundamentals. Non-commutative systems: There are nice ways to explain non-commutative groups and the crypto systems based on these, using everyday-life examples. Especially, twisting a Rubik’s Cube and plaiting a braid are easy-to-understand group operations a crypto system can be built on. Multivariate systems: Multivariate crypto can be explained to somebody who knows Gaussian elimination. Hash-based signatures: If properly explained, Hash-based signatures are easier to understand than any other asymmetric crypto scheme. I will explain these systems with cartoons, drawings, photographs, a Rubik’s Cube and other items. In addition, I will give a short introduction to quantum computers and the current Post-Quantum Crypto Competition (organised by US authority NIST).

How to Explain Post-Quantum Cryptography to a Middle School Student - Klaus S...

How to Explain Post-Quantum Cryptography to a Middle School Student - Klaus S...

How to Explain Post-Quantum Cryptography to a Middle School Student - Klaus S...

Data Center security has been forced to reinvent itself as software complexity increases, networking capabilities grow more agile, and attack complexity turns unmanageable. With this change, the need for security policy enforcement to be handled at the edge has pushed functionality onto host compute systems, resulting in inherent performance loss and security weakness due to consolidation of resources. In the first part of the talk we will be presenting a SmartNIC-based model for data-center security that solves both the performance problem and the security problems of edge-centric policy models. The model features a more robust isolation of responsibilities, superior offload capabilities, significantly better scaling of policy, and unique visibility opportunities. To illustrate this, we present a SmartNIC-based reference architecture for network layout, as well as examples of SmartNIC security controls and their resulting threat models. The second part of the talk will unveil a new innovative technique for tamper proof host introspection as SmartNICs are in a unique position to analyze and inspect the memory of the host to which they are attached. Normally, this functionality is reserved for a hypervisor, where it is known as ‘guest introspection’ or ‘virtual-machine introspection’. With host introspection, security controls no longer live in the hypervisor, but on the SmartNIC itself, on a separate trust domain. In this way, the visibility normally achieved with guest introspection can be performed for the entire host memory in an isolated and secure area. In order for host introspection to work in the same way as guest introspection, memory is DMA transferred in bursts over the PCI-e bus that attaches the SmartNIC to the host. As this method can be subverted to hide unwanted software, we will demonstrate a novel approach to tamper proof the acquisition of memory and for performing live introspection. Host introspection complements the network controls implemented using the SmartNIC by enabling the measurement of the integrity and the behavior of workloads (virtual machines, containers, bare metal servers) to identify possible indicators of compromise. The visibility and context gained also enhances the granularity of network controls, resulting in measurably better security for the data center compared to traditional software-only based controls.

Using SmartNICs to Provide Better Data Center Security - Jack Matheson - 44CO...

Using SmartNICs to Provide Better Data Center Security - Jack Matheson - 44CO...

Using SmartNICs to Provide Better Data Center Security - Jack Matheson - 44CO...

Exploits, Backdoors, and Hacks: words we do not commonly hear when speaking of Machine Learning (ML). In this talk, I will present the relatively new field of hacking and manipulate machine learning systems and the potential these techniques pose for active offensive research. The study of Adversarial ML allows us to leverage the techniques used by these algorithms to find weak points and exploit them in order to achieve: Unexpected consequences (why did it decide this rifle is a banana?) Data leakage (how did they know Joe has diabetes) Memory corruption and other exploitation techniques (boom! RCE) Influence the output In other words, while ML is great at identifying and classifying patterns, an attacker can take advantage of this and take control of the system. This talk is an extension of research made by many people, including presenters at DefCon, CCC, and others – a live demo will be shown on stage! Garbage In, RCE Out :)

JARVIS never saw it coming: Hacking machine learning (ML) in speech, text and...

JARVIS never saw it coming: Hacking machine learning (ML) in speech, text and...

JARVIS never saw it coming: Hacking machine learning (ML) in speech, text and...

Numerous technical articles, presentations, and even books exists about reverse engineering the Windows Driver Model (WDM) for purposes that vary from simply understanding how a specific driver works, to malware analysis and bug hunting. On the other hand, Microsoft has been providing the Kernel Mode Driver Framework (KMDF) for quite a while and we now see more and more drivers shifting to this framework instead of interacting directly with the OS like in the old WDM times. Yet, there is close to no information on how to approach this model from a reverse engineering and offensive standpoint. In this presentation, I will first do a quick recap on WDM drivers, its common structures, and how to identify its entry points. Then I’ll introduce KMDF with all its relevant functions for reverse engineering through a set of case-studies. I’ll describe how to interact with a KMDF device object through SetupDI api and how to find and analyze the different IO queues dispatch routines. Does the framework actually enhances security? We’ll come to a conclusion after revealing some major vendor implementation problems. Armed with this knowledge, you will be able to run your own bug hunting session over any KMDF driver.

Reverse Engineering and Bug Hunting on KMDF Drivers - Enrique Nissim - 44CON ...

Reverse Engineering and Bug Hunting on KMDF Drivers - Enrique Nissim - 44CON ...

Reverse Engineering and Bug Hunting on KMDF Drivers - Enrique Nissim - 44CON ...

In March 2018, the UK launched its Secure by Design report in order to help defend against security threats, especially for consumer Internet of Things products and services. Over the past few years, poorly secured IoT devices have been hijacked in both targeted as well as large-scale DDoS attacks such as Mirai. In addition to this, poor security can threaten both privacy and safety. The speaker, David Rogers authored the UK’s ‘Code of Practice for Security in Consumer IoT Products and Associated Services’, in collaboration with DCMS, NCSC, ICO and industry colleagues with extensive support from the security research community. David will discuss the guidelines within the Code of Practice, why these were prioritised and why the top three became dealing with the password problem, implementing vulnerability disclosure and acting on it and addressing software updates. David will also look at what’s next: what will the challenges be and will the Code of Practice succeed in its aims? How can IoT products possibly be certified and how will the threat landscape change in response to improving security?

The UK's Code of Practice for Security in Consumer IoT Products and Services ...

The UK's Code of Practice for Security in Consumer IoT Products and Services ...

The UK's Code of Practice for Security in Consumer IoT Products and Services ...

Cyber Security is often framed in terms of ‘Risk’- the possibility of suffering harm or loss – and the ‘Management’ of Risk to reduce uncertainty. This is familiar territory for businesses. Cyber Security falls in neatly under Risk Management, is assigned a suitable place on the organigramme, tossed some spare budget and granted a few paragraphs in the board report. NIST defines Risk as a ‘function of the likelihood of a given threat-source’s exercising a particular potential vulnerability, and the resulting impact of that adverse event on the organisation’. Key theme: This presentation explores the idea that making cyber security analogous to risk is holding us back. How about we talk about security ‘debt’ instead? Technical Debt is already a well understood concept in software development – the cost of additional rework caused by choosing an easy solution now instead of using a better approach that would take longer or cost more. Changing our language changes how we think and how we behave. This presentation argues that such a change could have a significant impact on software security. In this presentation we will comment on the power of ‘analogies’ and how they’ve shaped our industry. We’ll then consider the difference between the ‘security as risk’ and the ‘security as debt’ paradigms and explore how changing paradigms may change the way we think about, talk about and measure software security. We believe this could have a very empowering effect on development managers and other security professionals who are struggling to articulate the relative benefits of security (or a lack of security) to a software product.

Weak analogies make poor realities – are we sitting on a Security Debt Crisis...

Weak analogies make poor realities – are we sitting on a Security Debt Crisis...

Weak analogies make poor realities – are we sitting on a Security Debt Crisis...

Con speakers fear the Nerf gun. Overrun your talk time at your peril; Steve will shoot your arse with extreme prejudice until you STFU. We had to find a way to pwn the gun and shoot him back. That’s when we found the Nerf Terrascout: a remote tank gun controlled over 2.4GHz, with a video feed to the remote, complete with crosshairs. At first, we thought this would be a trivial job: figure out the RF and take control. It turned in to a mammoth hardware, firmware and RF reversing project. This puppy is so over-specced it would drive you to tears. The talk will cover the fails, hair loss and eventual success. There won’t be any smart dildos in it, though some of the techniques used are equally suited to teledildonics exploitation, if that’s your thing. Reversing RF in a high frequency environment using SDRs is challenging. We’ll discuss how we worked around these issues using hardware reversing skills. We had to import hardware from China for this project, which we could then programme ourselves using SPI, impersonate the legitimate controller and ‘jack the tank gun. This talk will of course include a live demonstration of hijacking the tank gun and (possibly) shooting Steve.

Pwning the 44CON Nerf Tank

Pwning the 44CON Nerf Tank

Pwning the 44CON Nerf Tank

Presented by: Julien Voisin and Thibault Koechlin Suhosin is a great PHP module, but unfortunately, it’s getting old, new ways have been found to compromise PHP applications, and some aren’t working anymore; and it doesn’t play well with the shiny new PHP 7. As a secure web-hosting company, we needed a reliable and future-proof solution to address the flow of new vulnerabilities that are published every day. This is why we developed Snuffleupagus, a new (and open-source!) PHP security module, that provides several features that we needed: passively killing several PHP-specific bug classes, but also implementing virtual-patching at the PHP level, allowing to patch vulnerabilities in a precise, false-positive-free, ultra-low overhead way, without even touching the applications’ code.

Security module for php7 – Killing bugclasses and virtual-patching the rest! ...

Security module for php7 – Killing bugclasses and virtual-patching the rest! ...

Security module for php7 – Killing bugclasses and virtual-patching the rest! ...

44CON London 2015 - Stegosploit - Drive-by Browser Exploits using only Images

44CON London 2015 - Stegosploit - Drive-by Browser Exploits using only Images

44CON London 2015 - Stegosploit - Drive-by Browser Exploits using only Images

44CON London 2015 - Is there an EFI monster inside your apple?

44CON London 2015 - Is there an EFI monster inside your apple?

44CON London 2015 - Is there an EFI monster inside your apple?

44CON London 2015 - Indicators of Compromise: From malware analysis to eradic...

44CON London 2015 - Indicators of Compromise: From malware analysis to eradic...

44CON London 2015 - Indicators of Compromise: From malware analysis to eradic...

44CON London 2015 - How to drive a malware analyst crazy

44CON London 2015 - How to drive a malware analyst crazy

44CON London 2015 - How to drive a malware analyst crazy

44CON London 2015 - 15-Minute Linux Incident Response Live Analysis

44CON London 2015 - 15-Minute Linux Incident Response Live Analysis

44CON London 2015 - 15-Minute Linux Incident Response Live Analysis

44CON London 2015 - Going AUTH the Rails on a Crazy Train

44CON London 2015 - Going AUTH the Rails on a Crazy Train

44CON London 2015 - Going AUTH the Rails on a Crazy Train

44CON London 2015 - Software Defined Networking (SDN) Security

44CON London 2015 - Software Defined Networking (SDN) Security

44CON London 2015 - Software Defined Networking (SDN) Security

44CON London 2015 - DDoS mitigation EPIC FAIL collection

44CON London 2015 - DDoS mitigation EPIC FAIL collection

44CON London 2015 - DDoS mitigation EPIC FAIL collection

44CON London 2015 - Hunting Asynchronous Vulnerabilities

44CON London 2015 - Hunting Asynchronous Vulnerabilities

44CON London 2015 - Hunting Asynchronous Vulnerabilities

44CON London 2015 - Reverse engineering and exploiting font rasterizers: the ...

44CON London 2015 - Reverse engineering and exploiting font rasterizers: the ...

44CON London 2015 - Reverse engineering and exploiting font rasterizers: the ...

44CON London 2015 - Jtagsploitation: 5 wires, 5 ways to root

44CON London 2015 - Jtagsploitation: 5 wires, 5 ways to root

44CON London 2015 - Jtagsploitation: 5 wires, 5 ways to root

Más de 44CON (20)

They're All Scorpions - Successful SecOps in a Hostile Workplace - Pete Herzo...

They're All Scorpions - Successful SecOps in a Hostile Workplace - Pete Herzo...

They're All Scorpions - Successful SecOps in a Hostile Workplace - Pete Herzo...

How to Explain Post-Quantum Cryptography to a Middle School Student - Klaus S...

How to Explain Post-Quantum Cryptography to a Middle School Student - Klaus S...

How to Explain Post-Quantum Cryptography to a Middle School Student - Klaus S...

Using SmartNICs to Provide Better Data Center Security - Jack Matheson - 44CO...

Using SmartNICs to Provide Better Data Center Security - Jack Matheson - 44CO...

Using SmartNICs to Provide Better Data Center Security - Jack Matheson - 44CO...

JARVIS never saw it coming: Hacking machine learning (ML) in speech, text and...

JARVIS never saw it coming: Hacking machine learning (ML) in speech, text and...

JARVIS never saw it coming: Hacking machine learning (ML) in speech, text and...

Reverse Engineering and Bug Hunting on KMDF Drivers - Enrique Nissim - 44CON ...

Reverse Engineering and Bug Hunting on KMDF Drivers - Enrique Nissim - 44CON ...

Reverse Engineering and Bug Hunting on KMDF Drivers - Enrique Nissim - 44CON ...

The UK's Code of Practice for Security in Consumer IoT Products and Services ...

The UK's Code of Practice for Security in Consumer IoT Products and Services ...

The UK's Code of Practice for Security in Consumer IoT Products and Services ...

Weak analogies make poor realities – are we sitting on a Security Debt Crisis...

Weak analogies make poor realities – are we sitting on a Security Debt Crisis...

Weak analogies make poor realities – are we sitting on a Security Debt Crisis...

Pwning the 44CON Nerf Tank

Pwning the 44CON Nerf Tank

Pwning the 44CON Nerf Tank

Security module for php7 – Killing bugclasses and virtual-patching the rest! ...

Security module for php7 – Killing bugclasses and virtual-patching the rest! ...

Security module for php7 – Killing bugclasses and virtual-patching the rest! ...

44CON London 2015 - Stegosploit - Drive-by Browser Exploits using only Images

44CON London 2015 - Stegosploit - Drive-by Browser Exploits using only Images

44CON London 2015 - Stegosploit - Drive-by Browser Exploits using only Images

44CON London 2015 - Is there an EFI monster inside your apple?

44CON London 2015 - Is there an EFI monster inside your apple?

44CON London 2015 - Is there an EFI monster inside your apple?

44CON London 2015 - Indicators of Compromise: From malware analysis to eradic...

44CON London 2015 - Indicators of Compromise: From malware analysis to eradic...

44CON London 2015 - Indicators of Compromise: From malware analysis to eradic...

44CON London 2015 - How to drive a malware analyst crazy

44CON London 2015 - How to drive a malware analyst crazy

44CON London 2015 - How to drive a malware analyst crazy

44CON London 2015 - 15-Minute Linux Incident Response Live Analysis

44CON London 2015 - 15-Minute Linux Incident Response Live Analysis

44CON London 2015 - 15-Minute Linux Incident Response Live Analysis

44CON London 2015 - Going AUTH the Rails on a Crazy Train

44CON London 2015 - Going AUTH the Rails on a Crazy Train

44CON London 2015 - Going AUTH the Rails on a Crazy Train

44CON London 2015 - Software Defined Networking (SDN) Security

44CON London 2015 - Software Defined Networking (SDN) Security

44CON London 2015 - Software Defined Networking (SDN) Security

44CON London 2015 - DDoS mitigation EPIC FAIL collection

44CON London 2015 - DDoS mitigation EPIC FAIL collection

44CON London 2015 - DDoS mitigation EPIC FAIL collection

44CON London 2015 - Hunting Asynchronous Vulnerabilities

44CON London 2015 - Hunting Asynchronous Vulnerabilities

44CON London 2015 - Hunting Asynchronous Vulnerabilities

44CON London 2015 - Reverse engineering and exploiting font rasterizers: the ...

44CON London 2015 - Reverse engineering and exploiting font rasterizers: the ...

44CON London 2015 - Reverse engineering and exploiting font rasterizers: the ...

44CON London 2015 - Jtagsploitation: 5 wires, 5 ways to root

44CON London 2015 - Jtagsploitation: 5 wires, 5 ways to root

44CON London 2015 - Jtagsploitation: 5 wires, 5 ways to root

Último

AWS Community Day CPH - Three problems of Terraform

AWS Community Day CPH - Three problems of Terraform

AWS Community Day CPH - Three problems of Terraform

Andrey Devyatkin

Data Cloud, More than a CDP by Matt Robison

Data Cloud, More than a CDP by Matt Robison

Data Cloud, More than a CDP by Matt Robison

Anna Loughnan Colquhoun

Following the popularity of "Cloud Revolution: Exploring the New Wave of Serverless Spatial Data," we're thrilled to announce this much-anticipated encore webinar. In this sequel, we'll dive deeper into the Cloud-Native realm by uncovering practical applications and FME support for these new formats, including COGs, COPC, FlatGeoBuf, GeoParquet, STAC, and ZARR. Building on the foundation laid by industry leaders Michelle Roby of Radiant Earth and Chris Holmes of Planet in the first webinar, this second part offers an in-depth look at the real-world application and behind-the-scenes dynamics of these cutting-edge formats. We will spotlight specific use-cases and workflows, showcasing their efficiency and relevance in practical scenarios. Discover the vast possibilities each format holds, highlighted through detailed discussions and demonstrations. Our expert speakers will dissect the key aspects and provide critical takeaways for effective use, ensuring attendees leave with a thorough understanding of how to apply these formats in their own projects. Elevate your understanding of how FME supports these cutting-edge technologies, enhancing your ability to manage, share, and analyze spatial data. Whether you're building on knowledge from our initial session or are new to the serverless spatial data landscape, this webinar is your gateway to mastering cloud-native formats in your workflows.

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

A Beginners Guide to Building a RAG App Using Open Source Milvus

A Beginners Guide to Building a RAG App Using Open Source Milvus

A Beginners Guide to Building a RAG App Using Open Source Milvus

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Real Time Object Detection Using Open CV

Real Time Object Detection Using Open CV

Real Time Object Detection Using Open CV

2024: Domino Containers - The Next Step. News from the Domino Container commu...

2024: Domino Containers - The Next Step. News from the Domino Container commu...

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Martijn de Jong

The Good, the Bad and the Governed - Why is governance a dirty word? David O'Neill, Chief Operating Officer - APIContext Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

GenAI Risks & Security Meetup 01052024.pdf

GenAI Risks & Security Meetup 01052024.pdf

GenAI Risks & Security Meetup 01052024.pdf

MS Copilot expands with MS Graph connectors

MS Copilot expands with MS Graph connectors

MS Copilot expands with MS Graph connectors

Nanddeep Nachan

ICT role in 21st century education and its challenges

ICT role in 21st century education and its challenges

ICT role in 21st century education and its challenges

rafiqahmad00786416

In this session, we will delve into strategic approaches for optimizing knowledge management within Microsoft 365, amidst the evolving landscape of Copilot. From leveraging automatic metadata classification and permission governance with SharePoint Premium, to unlocking Viva Engage for the cultivation of knowledge and communities, you will gain actionable insights to bolster your organization's knowledge-sharing initiatives. In this session, we will also explore how to facilitate solutions to enable your employees to find answers and expertise within Microsoft 365. You will leave equipped with practical techniques and a deeper understanding of how there is more to effective knowledge management than just enabling Copilot, but building actual solutions to prepare the knowledge that Copilot and your employees can use.

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...

Created by Mozilla Research in 2012 and now part of Linux Foundation Europe, the Servo project is an experimental rendering engine written in Rust. It combines memory safety and concurrency to create an independent, modular, and embeddable rendering engine that adheres to web standards. Stewardship of Servo moved from Mozilla Research to the Linux Foundation in 2020, where its mission remains unchanged. After some slow years, in 2023 there has been renewed activity on the project, with a roadmap now focused on improving the engine’s CSS 2 conformance, exploring Android support, and making Servo a practical embeddable rendering engine. In this presentation, Rakhi Sharma reviews the status of the project, our recent developments in 2023, our collaboration with Tauri to make Servo an easy-to-use embeddable rendering engine, and our plans for the future to make Servo an alternative web rendering engine for the embedded devices industry. (c) Embedded Open Source Summit 2024 April 16-18, 2024 Seattle, Washington (US) https://events.linuxfoundation.org/embedded-open-source-summit/ https://ossna2024.sched.com/event/1aBNF/a-year-of-servo-reboot-where-are-we-now-rakhi-sharma-igalia

A Year of the Servo Reboot: Where Are We Now?

A Year of the Servo Reboot: Where Are We Now?

A Year of the Servo Reboot: Where Are We Now?

Artificial Intelligence Chap.5 : Uncertainty

Artificial Intelligence Chap.5 : Uncertainty

Artificial Intelligence Chap.5 : Uncertainty

Khushali Kathiriya

Corporate and higher education. Two industries that, in the past, have had a clear divide with very little crossover. The difference in goals, learning styles and objectives paved the way for differing learning technologies platforms to evolve. Now, those stark lines are blurring as both sides are discovering they have content that’s relevant to the other. Join Tammy Rutherford as she walks through the pros and cons of corporate and higher ed collaborating. And the challenges of these different technology platforms working together for a brighter future.

Corporate and higher education May webinar.pptx

Corporate and higher education May webinar.pptx

Corporate and higher education May webinar.pptx

Rustici Software

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Product Anonymous

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Juan lago vázquez

DBX First Quarter 2024 Investor Presentation

DBX First Quarter 2024 Investor Presentation

DBX First Quarter 2024 Investor Presentation

Three things you will take away from the session: • How to run an effective tenant-to-tenant migration • Best practices for before, during, and after migration • Tips for using migration as a springboard to prepare for Copilot in Microsoft 365 Main ideas: Migration Overview: The presentation covers the current reality of cross-tenant migrations, the triggers, phases, best practices, and benefits of a successful tenant migration Considerations: When considering a migration, it is important to consider the migration scope, performance, customization, flexibility, user-friendly interface, automation, monitoring, support, training, scalability, data integrity, data security, cost, and licensing structure Next Wave: The next wave of change includes the launch of Copilot, which requires businesses to be prepared for upcoming changes related to Copilot and the cloud, and to consolidate data and tighten governance ShareGate: ShareGate can help with pre-migration analysis, configurable migration tool, and automated, end-user driven collaborative governance

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Último (20)

AWS Community Day CPH - Three problems of Terraform

AWS Community Day CPH - Three problems of Terraform

AWS Community Day CPH - Three problems of Terraform

Data Cloud, More than a CDP by Matt Robison

Data Cloud, More than a CDP by Matt Robison

Data Cloud, More than a CDP by Matt Robison

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

A Beginners Guide to Building a RAG App Using Open Source Milvus

A Beginners Guide to Building a RAG App Using Open Source Milvus

A Beginners Guide to Building a RAG App Using Open Source Milvus

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Real Time Object Detection Using Open CV

Real Time Object Detection Using Open CV

Real Time Object Detection Using Open CV

2024: Domino Containers - The Next Step. News from the Domino Container commu...

2024: Domino Containers - The Next Step. News from the Domino Container commu...

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

GenAI Risks & Security Meetup 01052024.pdf

GenAI Risks & Security Meetup 01052024.pdf

GenAI Risks & Security Meetup 01052024.pdf

MS Copilot expands with MS Graph connectors

MS Copilot expands with MS Graph connectors

MS Copilot expands with MS Graph connectors

ICT role in 21st century education and its challenges

ICT role in 21st century education and its challenges

ICT role in 21st century education and its challenges

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...

A Year of the Servo Reboot: Where Are We Now?

A Year of the Servo Reboot: Where Are We Now?

A Year of the Servo Reboot: Where Are We Now?

Artificial Intelligence Chap.5 : Uncertainty

Artificial Intelligence Chap.5 : Uncertainty

Artificial Intelligence Chap.5 : Uncertainty

Corporate and higher education May webinar.pptx

Corporate and higher education May webinar.pptx

Corporate and higher education May webinar.pptx

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

DBX First Quarter 2024 Investor Presentation

DBX First Quarter 2024 Investor Presentation

DBX First Quarter 2024 Investor Presentation

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

44CON 2014 - Advanced Excel Hacking, Didier Stevens

1. Advanced Excel Hacking Workshop Didier Stevens http://.DidierStevens.com/excel.zip

2. No Exploits Just Features

3. Unzip excel.zip to c:excel Password: Workshop

4. VBA (Visual Basic for Applications) is a complete Windows programming language

5. VBS (Visual Basic Script) is NOT a complete Windows programming language

6. VBA has access to the Windows API

7. VBA: MS Office (Word, Excel Powerpoint, …), AutoCAD, ...

8. Excel: what I prefer as a User Interface

9.

10.

11. Exercise 1: “Hello World” message box with VBA

12. VBA7 Introduced with Office 2010 Support for 64-bit

13. 32-bit Excel or 64-bit Excel?

14. Excel 2007 or earlier: 32-bit

15. Excel 2010 or 2013: Check File/Help

16.

17. 3 new VBA7 keywords: PtrSafe LongLong LongPtr

18. 2 new VBA7 compilation constants VBA7 Win64

19. I use Win64 If Win64 is defined, I know that I'm using VBA7 on a 64-bit application Thus I use the new keywords (PtrSafe, LongLong, LongPtr)

20. If Win64 is not defined, I know that I am on 32-bit application. And then I DO NOT use the new keywords.

21. Exercise 2: “Hello World” message box with API 32-bit, 64-bit & both

22. API functions: not only basic types as arguments, but also structures

23. Private Declare PtrSafe Sub GetSystemTime Lib "kernel32.dll" (st As SYSTEMTIME)

24. Private Type SYSTEMTIME wYear As Integer wMonth As Integer wDayOfWeek As Integer wDay As Integer wHour As Integer wMinute As Integer wSecond As Integer wMilliseconds As Integer End Type

25. Exercise 3: GetSystemTime 32-bit, 64-bit & both

26. InstalledPrograms

27. NetworkMashup-32

28. TaskManager.xls / TaskManagerSC.xls

29. Problem: writing a lot of VBA code

31. Modify C source code datapipe datapipe.exe → datapipe.dll

32.

33.

34. DLL to shellcode CreateMemoryModuleShellCode.py datapipe-dll. dll datapipe-dll.dll.bin

35. Shellcode to VBA shellcode2vba.py datapipe-dll.dll.bin datapipe-dll. dll.bin.base64.vba

36. ReactOS cmd and regedit

37.

38.

39.

41. 20% discount sale for Brucon: PDF Analysis workshop videos on CD: €20 White Hat Shellcode workshop videos on CD: €20 x64 workshop videos on CD: €20 All videos on CD: €50 http://DidierStevensLabs.com