Vulnerabilities and Exploitation - Application Security Sci-Fi Hipster Edition

•Descargar como PPTX, PDF•

0 recomendaciones•494 vistas

Explaining vulnerabilities, exploits, attack vectors, attack surface reduction, aslr etc to someone who understands The Imperial Deathstar. Presented at Opkoko 2013.1. Live presentation recording in Swedish here: http://www.youtube.com/watch?v=Xi9SRFENiO4

Tecnología

Vulnerabilities and Exploitation
APPLICATION SECURITY SCI-FI HIPSTER EDITION!
peter magnusson
twitter: @blaufish_
omegapoint.se
sakerhetspodcasten.se

DEFENDER
Imperial Death Star
(legacy application)

VULNERABILITY
Reactor core
(document.write, s
printf, eval)

ATTACK VECTOR
Exhaust port / shaft
(code paths etc.
connecting input to
vulnerability )

EXPLOIT
Torpedo fitting into
exhaust port
Reach and gain
control over
vulnerability,
?id=%27%20SQL

EXPLOIT PAYLOAD
Exploding proton warhead
(metasploit meterpreter,
connect back shells, sqli
downloading database,
etc)

ATTACK SURFACE
REDUCTION
Disable by default
Close unused port
Force-field
(firewall)

FIX
VULNERABILITY
Exploding core ->
safe non-exploding
core
(sprintf -> snprintf)

DON’T JUST FIX
ONE ATTACK
VECTOR
Often multiple
paths to same
vulnernability

EXPLOIT
MITIGATION
ASLR: Randomize
location of
vulnerability

Más contenido relacionado

Similar a Vulnerabilities and Exploitation - Application Security Sci-Fi Hipster Edition

Buffer overflow attacks

Kapil Nagrale

В рамках мастер-класса будут рассмотрены следующие вопросы: распространённые уязвимости в клиентском ПО - stack overflow, heap overflow, use-after-free и т.д.; базовые методы эксплуатации (на примере Windows XP), обход DEP; продвинутые методы эксплуатации (на примере Windows 7), обход DEP+ASLR; бинарный анализ security fix'ов (на примере "вторника патчей" от Microsoft).

Positive Hack Days. Тараканов. Мастер-класс: уязвимости нулевого дня

Positive Hack Days

[論文紹介] VCC-Finder: Finding Potential Vulnerabilities in Open-Source Projects ...

Kenta Yamamoto

System Hacking Tutorial #1 - Introduction to Vulnerability and Type of Vulner...

sanghwan ahn

Slides accompanying zkStudyClub talk: Zero-Knowledge Proofs Security, in Practice. JP Aumasson (co-creator of the BLAKE hash function family) will share his experience doing security auditing for various projects that use zero-knowledge proofs. He will describe his approach, the common pitfalls in the different components of a proof system, as well as a catalog of bugs that have been discovered in various projects

zkStudyClub: Zero-Knowledge Proofs Security, in Practice [JP Aumasson, Taurus]

Alex Pruden

Os Cook

oscon2007

Enabling Worm and Malware Investigation Using Virtualization

amiable_indian

Exploiting buffer overflows

Paul Dutot IEng MIET MBCS CITP OSCP CSTM

Buffer overflow

Evgeni Tsonev

1 Buttercup: On Network-based Detection of Polymorphic Buffer Overflow Vulnerabilities Archana Pasupulati, Jason Coit, Karl Levitt, S. Felix Wu Department of Computer Science University of California, Davis {pasupula, coit,levitt, wu}@cs.ucdavis.edu S.H. Li, R.C. Kuo, Kuo-Pao Fan Computer Communication Labortory Industry Technology Research Institute {shli, rckuo}@itri.org.tw Abstract — Attack polymorphism is a powerful tool for the attackers in the Internet to evade signature-based intrusion detection/prevention systems. On the other hand, new and faster Internet worms can be coded and launched easily by even high school students at any moment of time to against our critical infrastructures such as DNS or update servers. And, we believe that polymorphic Internet worms will be developed in the future such that many of our current solutions might have very small chance to survive. In this paper, we propose a simple solution called “Buttercup” to counter against attacks based on buffer-overflow exploits (such as CodeRed, Nimda, Slammer, and Blaster). We have implemented our idea in SNORT, and included 19 return address ranges of buffer-overflow exploits. With a suite of tests against 13 TCPdump traces, the false positive for our best algorithm is as low as 0.01%. This indicates that, potentially, Buttercup can drop 100% worm attack packets on the wire while only 0.01% of the good packets will be sacrificed. I. Introduction Since a signature-based Network Intrusion Detection System (NIDS) identifies an attack instance by exactly matching attack signatures against the incoming and outgoing data packets, when the well-known attacks are modified/transformed differently, the NIDS might fail due to its inability to match them in its signature database. Sometimes, we call these transformed attacks (but all from one single original attack signature, for the purpose of IDS evasion) “polymorphic attacks”. 2 In this paper, we propose a new solution to accurately identify one particular type of polymorphic attacks, known as polymorphic shellcode. Due to the space limitation, solutions for dealing with other types of polymorphic attacks are discussed in [1]. Under the polymorphic shellcode attacks, the attacker can choose an unknown encryption algorithm to encrypt the attack code and include the decryption code as part of the attack packet. The trick to make the whole thing work is to utilize an existing buffer-overflow exploit and to set the “return” memory address on the over-flowed stack to be the entrance point of the decryption code module. The attacker can transform every other bit in the packet payload to avoid being detected by a signature-based IDS, but a critical constraint exists on the range of the “return” memory address that can be twisted. Our solution, Buttercup, is simply to identify the ranges of the possible return memory addresses for existing buffer-ov ...

1Buttercup On Network-based Detection of Polymorphic B.docx

aryan532920

Similar a Vulnerabilities and Exploitation - Application Security Sci-Fi Hipster Edition (10)

Buffer overflow attacks

Positive Hack Days. Тараканов. Мастер-класс: уязвимости нулевого дня

[論文紹介] VCC-Finder: Finding Potential Vulnerabilities in Open-Source Projects ...

System Hacking Tutorial #1 - Introduction to Vulnerability and Type of Vulner...

zkStudyClub: Zero-Knowledge Proofs Security, in Practice [JP Aumasson, Taurus]

Os Cook

Enabling Worm and Malware Investigation Using Virtualization

Exploiting buffer overflows

Buffer overflow

1Buttercup On Network-based Detection of Polymorphic B.docx

Último

FWD Group - Insurer Innovation Award 2024

The Digital Insurer

Effective data discovery is crucial for maintaining compliance and mitigating risks in today's rapidly evolving privacy landscape. However, traditional manual approaches often struggle to keep pace with the growing volume and complexity of data. Join us for an insightful webinar where industry leaders from TrustArc and Privya will share their expertise on leveraging AI-powered solutions to revolutionize data discovery. You'll learn how to: - Effortlessly maintain a comprehensive, up-to-date data inventory - Harness code scanning insights to gain complete visibility into data flows leveraging the advantages of code scanning over DB scanning - Simplify compliance by leveraging Privya's integration with TrustArc - Implement proven strategies to mitigate third-party risks Our panel of experts will discuss real-world case studies and share practical strategies for overcoming common data discovery challenges. They'll also explore the latest trends and innovations in AI-driven data management, and how these technologies can help organizations stay ahead of the curve in an ever-changing privacy landscape.

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

TrustArc

💥 You’re lucky! We’ve found two different (lead) developers that are willing to share their valuable lessons learned about using UiPath Document Understanding! Based on recent implementations in appealing use cases at Partou and SPIE. Don’t expect fancy videos or slide decks, but real and practical experiences that will help you with your own implementations. 📕 Topics that will be addressed: • Training the ML-model by humans: do or don't? • Rule-based versus AI extractors • Tips for finding use cases • How to start 👨‍🏫👨‍💻 Speakers: o Dion Morskieft, RPA Product Owner @Partou o Jack Klein-Schiphorst, Automation Developer @Tacstone Technology

DEV meet-up UiPath Document Understanding May 7 2024 Amsterdam

UiPathCommunity

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

MadyBayot

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Edi Saputra

Understanding the FAA Part 107 License ..

Christopher Logan Kennedy

Webinar Recording: https://www.panagenda.com/webinars/why-teams-call-analytics-is-critical-to-your-entire-business Nothing is as frustrating and noticeable as being in an important call and being unable to see or hear the other person. Not surprising then, that issues with Teams calls are among the most common problems users call their helpdesk for. Having in depth insight into everything relevant going on at the user’s device, local network, ISP and Microsoft itself during the call is crucial for good Microsoft Teams Call quality support. To ensure a quick and adequate solution and to ensure your users get the most out of their Microsoft 365. But did you know that ‘bad calls’ are also an excellent indicator of other problems arising? Precisely because it is so noticeable!? Like the canary in the mine, bad calls can be early indicators of problems. Problems that might otherwise not have been noticed for a while but can have a big impact on productivity and satisfaction. Join this session by Christoph Adler to learn how true Microsoft Teams call quality analytics helped other organizations troubleshoot bad calls and identify and fix problems that impacted Teams calls or the use of Microsoft365 in general. See what it can do to keep your users happy and productive! In this session we will cover - Why CQD data alone is not enough to troubleshoot call problems - The importance of attributing call problems to the right call participant - What call quality analytics can do to help you quickly find, fix-, and prevent problems - Why having retrospective detailed insights matters - Real life examples of how others have used Microsoft Teams call quality monitoring to problem shoot problems with their ISP, network, device health and more.

Why Teams call analytics are critical to your entire business

panagenda

ICT role in 21st century education and its challenges

rafiqahmad00786416

AWS Community Day CPH - Three problems of Terraform

Andrey Devyatkin

Corporate and higher education. Two industries that, in the past, have had a clear divide with very little crossover. The difference in goals, learning styles and objectives paved the way for differing learning technologies platforms to evolve. Now, those stark lines are blurring as both sides are discovering they have content that’s relevant to the other. Join Tammy Rutherford as she walks through the pros and cons of corporate and higher ed collaborating. And the challenges of these different technology platforms working together for a brighter future.

Corporate and higher education May webinar.pptx

Rustici Software

[BuildWithAI] Introduction to Gemini.pdf

Sandro Moreira

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Product Anonymous

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Juan lago vázquez

Elevate Developer Efficiency & build GenAI Application with Amazon Q

Bhuvaneswari Subramani

How to Troubleshoot Apps for the Modern Connected Worker

ThousandEyes

Following the popularity of “Cloud Revolution: Exploring the New Wave of Serverless Spatial Data,” we’re thrilled to announce this much-anticipated encore webinar. In this sequel, we’ll dive deeper into the Cloud-Native realm by uncovering practical applications and FME support for these new formats, including COGs, COPC, FlatGeoBuf, GeoParquet, STAC, and ZARR. Building on the foundation laid by industry leaders Michelle Roby of Radiant Earth and Chris Holmes of Planet in the first webinar, this second part offers an in-depth look at the real-world application and behind-the-scenes dynamics of these cutting-edge formats. We will spotlight specific use-cases and workflows, showcasing their efficiency and relevance in practical scenarios. Discover the vast possibilities each format holds, highlighted through detailed discussions and demonstrations. Our expert speakers will dissect the key aspects and provide critical takeaways for effective use, ensuring attendees leave with a thorough understanding of how to apply these formats in their own projects. Elevate your understanding of how FME supports these cutting-edge technologies, enhancing your ability to manage, share, and analyze spatial data. Whether you’re building on knowledge from our initial session or are new to the serverless spatial data landscape, this webinar is your gateway to mastering cloud-native formats in your workflows.

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Safe Software

Tracing the root cause of a performance issue requires a lot of patience, experience, and focus. It’s so hard that we sometimes attempt to guess by trying out tentative fixes, but that usually results in frustration, messy code, and a considerable waste of time and money. This talk explains how to correctly zoom in on a performance bottleneck using three levels of profiling: distributed tracing, metrics, and method profiling. After we learn to read the JVM profiler output as a flame graph, we explore a series of bottlenecks typical for backend systems, like connection/thread pool starvation, invisible aspects, blocking code, hot CPU methods, lock contention, and Virtual Thread pinning, and we learn to trace them even if they occur in library code you are not familiar with. Attend this talk and prepare for the performance issues that will eventually hit any successful system. About authorWith two decades of experience, Victor is a Java Champion working as a trainer for top companies in Europe. Five thousands developers in 120 companies attended his workshops, so he gets to debate every week the challenges that various projects struggle with. In return, Victor summarizes key points from these workshops in conference talks and online meetups for the European Software Crafters, the world’s largest developer community around architecture, refactoring, and testing. Discover how Victor can help you on victorrentea.ro : company training catalog, consultancy and YouTube playlists.

Finding Java's Hidden Performance Traps @ DevoxxUK 2024

Victor Rentea

Three things you will take away from the session: • How to run an effective tenant-to-tenant migration • Best practices for before, during, and after migration • Tips for using migration as a springboard to prepare for Copilot in Microsoft 365 Main ideas: Migration Overview: The presentation covers the current reality of cross-tenant migrations, the triggers, phases, best practices, and benefits of a successful tenant migration Considerations: When considering a migration, it is important to consider the migration scope, performance, customization, flexibility, user-friendly interface, automation, monitoring, support, training, scalability, data integrity, data security, cost, and licensing structure Next Wave: The next wave of change includes the launch of Copilot, which requires businesses to be prepared for upcoming changes related to Copilot and the cloud, and to consolidate data and tighten governance ShareGate: ShareGate can help with pre-migration analysis, configurable migration tool, and automated, end-user driven collaborative governance

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

sammart93

The microservices honeymoon is over. When starting a new project or revamping a legacy monolith, teams started looking for alternatives to microservices. The Modular Monolith, or 'Modulith', is an architecture that reaps the benefits of (vertical) functional decoupling without the high costs associated with separate deployments. This talk will delve into the advantages and challenges of this progressive architecture, beginning with exploring the concept of a 'module', its internal structure, public API, and inter-module communication patterns. Supported by spring-modulith, the talk provides practical guidance on addressing the main challenges of a Modultith Architecture: finding and guarding module boundaries, data decoupling, and integration module-testing. You should not miss this talk if you are a software architect or tech lead seeking practical, scalable solutions. About the author With two decades of experience, Victor is a Java Champion working as a trainer for top companies in Europe. Five thousands developers in 120 companies attended his workshops, so he gets to debate every week the challenges that various projects struggle with. In return, Victor summarizes key points from these workshops in conference talks and online meetups for the European Software Crafters, the world’s largest developer community around architecture, refactoring, and testing. Discover how Victor can help you on victorrentea.ro : company training catalog, consultancy and YouTube playlists.

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

Victor Rentea

Keynote 2: APIs in 2030: The Risk of Technological Sleepwalk Paolo Malinverno, Growth Advisor - The Business of Technology Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...

apidays