Zeronights 2013 - воруем домены

19
Fast Track Уязвимости в логике работы веб-приложений панелей управления хостинг-провайдеров

Transcript of Zeronights 2013 - воруем домены

Page 1: Zeronights 2013 - воруем домены

Fast Track

Уязвимости в логике работы веб-приложений панелей управления

хостинг-провайдеров

Page 2: Zeronights 2013 - воруем домены

-18

Page 3: Zeronights 2013 - воруем домены
Page 4: Zeronights 2013 - воруем домены
Page 5: Zeronights 2013 - воруем домены
Page 6: Zeronights 2013 - воруем домены
Page 7: Zeronights 2013 - воруем домены

DNS-сервер

Page 8: Zeronights 2013 - воруем домены

Баг или фича?

Page 9: Zeronights 2013 - воруем домены

ТОП-15 хостинг-провайдеров российского рынка

Page 10: Zeronights 2013 - воруем домены

Здесь были красивые таблички

Но теперь их нет

Page 11: Zeronights 2013 - воруем домены

Никому ненужная статистика

Page 12: Zeronights 2013 - воруем домены

Вектор #1

Page 13: Zeronights 2013 - воруем домены

Вектор #2ТиЦ + PR

Содержимое .htaccess:

Page 14: Zeronights 2013 - воруем домены

Вектор #2ТиЦ + PR

Page 15: Zeronights 2013 - воруем домены

Вектор #3MITM

Page 16: Zeronights 2013 - воруем домены

Сервис 1stat.ru

Page 17: Zeronights 2013 - воруем домены

Обратный резолвинг

• Yougetsignal.com (Domain List или API)• Bing.com (ip: 127.0.0.1)• Прочие сервисы и утилиты

Page 18: Zeronights 2013 - воруем домены

Способ защиты

Page 19: Zeronights 2013 - воруем домены

Спасибо за внимание

@i_bo0om

Дмитрий Bo0oM Бумов


DATA-ONLY PWNING MICROSOFT WINDOWS KERNEL: EXPLOITATION OF KERNEL POOL OVERFLOWS ON MICROSOFT WINDOWS 8.1 Nikita Tarakanov, Moscow, Russia ZeroNights 2014.

DATA-ONLY PWNING MICROSOFT WINDOWS KERNEL: EXPLOITATION OF KERNEL POOL OVERFLOWS ON MICROSOFT WINDOWS 8.1 Nikita Tarakanov, Moscow, Russia ZeroNights 2014.

Automating iOS blackbox security scanning - ZeroNights · Automating iOS blackbox security scanning Mikhail Sosonkin mikhail@synack.com SYNACK Inc. ME! “leverages the best combination

Automating iOS blackbox security scanning - ZeroNights · Automating iOS blackbox security scanning Mikhail Sosonkin [email protected] SYNACK Inc. ME! “leverages the best combination

Blackbox analysis of iOS apps - ZeroNights · Blackbox analysis of iOS apps Dmitry 'D1g1' Evdokimov, Security researcher at Digital Security (ERPScan)

Blackbox analysis of iOS apps - ZeroNights · Blackbox analysis of iOS apps Dmitry 'D1g1' Evdokimov, Security researcher at Digital Security (ERPScan)

Trend, Mitigation and Detection Tactics - Zeronights … Understand current threat landscape for Windows 00 Learn most common exploit and post-exploit methods 01 Evaluate Windows 10’s

Trend, Mitigation and Detection Tactics - Zeronights … Understand current threat landscape for Windows 00 Learn most common exploit and post-exploit methods 01 Evaluate Windows 10’s

HART (IN)SECURITY - Zeronights 20172013.zeronights.org/includes/...HART_in_security.pdf · HART: more closer look OSI Layer HART 7 Application Hart commands 2 Datalink Binary, Master/Slave

HART (IN)SECURITY - Zeronights 20172013.zeronights.org/includes/...HART_in_security.pdf · HART: more closer look OSI Layer HART 7 Application Hart commands 2 Datalink Binary, Master/Slave

Practical exploitation of rounding vulnerabilities in ...2013.zeronights.org/includes/docs/Adrian_Furtuna... · ZeroNights 2013 In Internet Banking apps Banks are vulnerable also

Practical exploitation of rounding vulnerabilities in ...2013.zeronights.org/includes/docs/Adrian_Furtuna... · ZeroNights 2013 In Internet Banking apps Banks are vulnerable also

Reversing Data Formats: What Data Can Reveal by Anton Dorfman ZeroNights 0x03, Moscow, 2013.

Reversing Data Formats: What Data Can Reveal by Anton Dorfman ZeroNights 0x03, Moscow, 2013.

Burp Zeronights workshop

Burp Zeronights workshop

UEFI Firmware Rootkits: Myths and Reality - ZeroNights 2016 · PDF fileUEFI Firmware Rootkits: Myths and Reality (Revisited for ZeroNights) Alex Matrosov @matrosov Eugene Rodionov

UEFI Firmware Rootkits: Myths and Reality - ZeroNights 2016 · PDF fileUEFI Firmware Rootkits: Myths and Reality (Revisited for ZeroNights) Alex Matrosov @matrosov Eugene Rodionov

s one of the main conferences on practical aspects...ZeroNights is one of the main conferences on practical aspects of cybersecurity in Europe. It is meant for technical specialists,

s one of the main conferences on practical aspects...ZeroNights is one of the main conferences on practical aspects of cybersecurity in Europe. It is meant for technical specialists,

Hacking OpenAM Infrastructure - ZeroNights …2012.zeronights.org/includes/docs/Noseevich, Petukhov - No locked...Hacking OpenAM Infrastructure George ... Devs didn't worry too much

Hacking OpenAM Infrastructure - ZeroNights …2012.zeronights.org/includes/docs/Noseevich, Petukhov - No locked...Hacking OpenAM Infrastructure George ... Devs didn't worry too much

Bo0oM - Deanonymization and total espionage (ZeroNights, 2014)

Bo0oM - Deanonymization and total espionage (ZeroNights, 2014)

SPEL INJECTION - ZeroNights ZN2018 WV... · SpEL? •The Spring Expression Language (SpEL for short) is expression language that supports querying and manipulating an object graph

SPEL INJECTION - ZeroNights ZN2018 WV... · SpEL? •The Spring Expression Language (SpEL for short) is expression language that supports querying and manipulating an object graph

DbiFuzz framework #ZeroNights E.0x03 slides

DbiFuzz framework #ZeroNights E.0x03 slides

Testing of Password Policy Anton Dedov ZeroNights 2013.

Testing of Password Policy Anton Dedov ZeroNights 2013.

ZeroNights-2013: Topgun multi-terabit DPI

ZeroNights-2013: Topgun multi-terabit DPI

Excite project - Конференция ZERONIGHTS 2016 · All fragments of source code as well as memory dumps relate to ... Excite project combines dynamic symbolic execution and

Excite project - Конференция ZERONIGHTS 2016 · All fragments of source code as well as memory dumps relate to ... Excite project combines dynamic symbolic execution and

Smuggling splitting poisoning. ZeroNights. ONsec

Smuggling splitting poisoning. ZeroNights. ONsec

MALIGN MACHINE LEARNING MODELS - ZeroNights · 2019-12-12 · Custom serialization •Protobuf format (.pb) •~1300 operations (math, conditionals, statistics, etc.) •Only TWO

MALIGN MACHINE LEARNING MODELS - ZeroNights · 2019-12-12 · Custom serialization •Protobuf format (.pb) •~1300 operations (math, conditionals, statistics, etc.) •Only TWO

Python Arsenal for Reverse Engineering · •Co-organizer of DEFCON Russia & ZeroNights •Author of “Python Arsenal for Reverse Engineering” •I specialize in finding vulnerabilities

Python Arsenal for Reverse Engineering · •Co-organizer of DEFCON Russia & ZeroNights •Author of “Python Arsenal for Reverse Engineering” •I specialize in finding vulnerabilities