apresentação exploit

12

COMPLEXIDADE DE ALGORITMOS Professor Edson Lima DENIS VIEIRA NONDAS JUNIOR EXPLOIT

Upload: denis-vieira

Post on 14-Jul-2015

78 views

Category:

Software

6 download

Report

Download

Embed Size (px):

TRANSCRIPT

Page 1: Apresentação exploit

COMPLEXIDADE DE ALGORITMOSProfessor Edson Lima

DENIS VIEIRANONDAS JUNIOR

EXPLOIT

Page 2: Apresentação exploit

Exploit, Payload e Shellcode

Page 3: Apresentação exploit

listen(Sock, 1);while(1){ Tam = sizeof(struct sockaddr_in); if((Novo=accept(Sock, (struct sockaddr *)&Cliente,&Tam))==1) exit(1); memset(Mens,0,strlen(Mens)); if(read(Novo,Mens,sizeof(Mens)) < 0) exit(2); TrataMensagem(Mens); close(Novo);}void TrataMensagem(char *Mens){ char Buffer[256]; strcpy(Buffer,Mens); /* VULNERABILIDADE: caso Mens seja maior que

256, haverá o estouro*/ }

Page 4: Apresentação exploit

unsigned char cod[]={0xeb,0x1f,0x90,0x90,0x90,0x90,0x5e,0x31,0xc0,0x88,0x46,0x07,0x89,0xf3,0xb0,0x08,0xb9,0xff,0xf1,0xff,0xff,0xcd,0x80,0xb0,0x01,0x31,0xdb,0xcd,0x80,0x90,0x90,0x90,0x90,0xe8,0xe0,0xff,0xff,0xff,0};

Shellcode

Program.exe param1, pram2, cod

Page 5: Apresentação exploit

ARMITAGE – MSFCONSOLE - MFSCL

Page 6: Apresentação exploit

O metasploit e ferramenta utilizada em grande escala por profissionais de

segurança. Desenvolvido por HD Moore especialista em segurança,

teve sua primeira versão escrita em Perl e lançada em Outubro de 2003,

a versão 2.0 de Abril de 2004 reescrita em Ruby contava com 19 exploits e alguns payloads. Em 2009, a empresa Rapid7

adquire o projeto Metasploit e a ferramenta ganha força da comunidade envolvida em segurança da informação.

Page 7: Apresentação exploit

ARMITAGE

Page 8: Apresentação exploit

MSFCONSOLE

Page 9: Apresentação exploit

MFSCL

Page 10: Apresentação exploit

Conficker

Page 11: Apresentação exploit

RPC DCOM

Page 12: Apresentação exploit

Exploit Research and Development Megaprimer: mona.py, Exploit Writer's Swiss Army Knife

Exploit writing tutorial part 1 - codeengn.comcodeengn.com/archive/Reverse Engineering/Exploit/Exploit writing... · Exploit writing tutorial part 1: Stack Based Overflows1 By Peter

Buffer OverFlow Exploit

2013 Threat Report R3 - bluekarmasecurity.net · The first Angler Exploit Kit to integrate CVE-2013-0074/3896 • Silence Exploit Kit • Himan Exploit Kit • Private Exploit Kit

Windows Kernel Shellcode Exploit - HITCON Pacific …hitcon.org/.../2005/Windows_Kernel_Shellcode_Exploit.pdfWindows Kernel shellcode Exploit • Ring3->Ring0 • Exploit Apc inject

Exploit Kit - IWSEC · Exploit Kit Drive-by Download Exploit Kit Exploit Kit MWS2015 Improving Cyber Attack Detection System To Adopt The Changing Of Exploit Kit ... Angler Exploit

Internet Explorer Exploit

Probabilistic Attack Planning in Network + WebApps Scenarios · exploit ssh (on an OpenBSD) exploit wu-ftpd (on a Linux) exploit IIS (on a Windows) exploit apache (on a Linux) Plan:

Exploit Research and Development Megaprimer: Unicode Based Exploit Development

QUALIFIED TO EXPLOIT?

Exploit Code Development

Blackhole Exploit Kit: A Spam Campaign, Not a Series of ...apac.trendmicro.com/.../white-papers/wp_blackhole-exploit-kit.pdf · Blackhole Exploit Kit: A Spam Campaign, ... (USPS),

Exploit windows

Exploit DISTCCD Metasploitable

Exploit Prediction Scoring System (EPSS) · We collect information about whether proof-of-concept exploit code or weaponized exploits exists. Exploit code was extracted from Exploit

MRG Effitas Exploit and Post-exploit Protection Test...MRG Effitas – Exploit and Post-exploit Protection Functionality Test Copyright 2018 Effitas Ltd. This article or any part thereof

Exploit Frameworks

App Trailers Exploit

Exploit Research

Exploit exercises.com stack-overflows

Linux Exploit Mitigation 1 - Compass Security · To understand exploit mitigations Need to understand exploit techniques I’ll lead ... Memory Corruption Types Memory Corruptions

Windows Exploit Mitigations - exploit.courses Exploit Mitigations Some statements:

Explore-Exploit Graph Traversal for Image Retrievalmvolkovs/cvpr2019EGT.pdftween exploit and explore steps. The exploit step maxi-mally utilizes the immediate neighborhood of each

Sql injection exploit

Understand analyse exploit

Exploit: Password Cracking

The Birth of a Complete IE11 Exploit Under the New Exploit ... 2015 Singapore/SyScan 2015... · The Birth of a Complete IE11 Exploit Under the New Exploit Mitigations Yuki Chen Qihoo

Revista Exploit

Vc4 nm73 eq6-exploit

Anatomy of Exploit Kits - Preliminary Analysis of Exploit Kits as

Advanced Exploit Development

Investor Presentation Exploit

Vulnerabilità exploit