[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

Moabi.comFollow

Hacker at Moabi.com

Sep. 18, 2010•0 likes•10,450 views

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

Sep. 18, 2010•0 likes•10,450 views

Download to read offline

Pre-boot authentication software, in particular full hard disk encryption software, play a key role in preventing information theft. In this paper, we present a new class of vulnerability affecting multiple high value pre-boot authentication software, including the latest Microsoft disk encryption technology : Microsoft Vista's Bitlocker, with TPM chip enabled. Because Pre-boot authentication software programmers commonly make wrong assumptions about the inner workings of the BIOS interruptions responsible for handling keyboard input, they typically use the BIOS API without flushing or initializing the BIOS internal keyboard buffer. Therefore, any user input including plain text passwords remains in memory at a given physical location. In this article, we first present a detailed analysis of this new class of vulnerability and generic exploits for Windows and Unix platforms under x86 architectures. Unlike current academic research aiming at extracting information from the RAM, our practical methodology does not require any physical access to the computer to extract plain text passwords from the physical memory. In a second part, we will present how this information leakage combined with usage of the BIOS API without careful initialization of the BIOS keyboard buffer can lead to computer reboot without console access and full security bypass of the pre-boot authentication pin if an attacker has enough privileges to modify the bootloader. Other related work include information leakage from CPU caches, reading physical memory thanks to firewire and switching CPU modes.

Moabi.comFollow

Hacker at Moabi.com

Recommended

XPDDS17: Introduction to Intel SGX and SGX Virtualization - Kai Huang, Intel

XPDDS17: Introduction to Intel SGX and SGX Virtualization - Kai Huang, Intel

XPDDS17: Introduction to Intel SGX and SGX Virtualization - Kai Huang, IntelThe Linux Foundation1.1K views•13 slides

Windows Kernel Exploitation : This Time Font hunt you down in 4 bytes

Windows Kernel Exploitation : This Time Font hunt you down in 4 bytes

Windows Kernel Exploitation : This Time Font hunt you down in 4 bytesPeter Hlavaty31.1K views•50 slides

UEFI Firmware Rootkits: Myths and Reality

UEFI Firmware Rootkits: Myths and Reality

UEFI Firmware Rootkits: Myths and RealitySally Feller981 views•95 slides

Xvisor: embedded and lightweight hypervisor

Xvisor: embedded and lightweight hypervisor

Xvisor: embedded and lightweight hypervisorNational Cheng Kung University9K views•38 slides

Arm device tree and linux device drivers

Arm device tree and linux device drivers

Arm device tree and linux device driversHoucheng Lin17.4K views•19 slides

Nzitf Velociraptor Workshop

Nzitf Velociraptor Workshop

Nzitf Velociraptor WorkshopVelocidex Enterprises740 views•108 slides

More Related Content

What's hot

EMBA - Firmware analysis - Black Hat Arsenal USA 2022

EMBA - Firmware analysis - Black Hat Arsenal USA 2022

EMBA - Firmware analysis - Black Hat Arsenal USA 2022MichaelM85042100 views•20 slides

Linux Kernel Booting Process (2) - For NLKB

Linux Kernel Booting Process (2) - For NLKB

Linux Kernel Booting Process (2) - For NLKBshimosawa8.2K views•123 slides

U-Boot - An universal bootloader

U-Boot - An universal bootloader

U-Boot - An universal bootloader Emertxe Information Technologies Pvt Ltd2.9K views•46 slides

LCU13: An Introduction to ARM Trusted Firmware

LCU13: An Introduction to ARM Trusted Firmware

LCU13: An Introduction to ARM Trusted FirmwareLinaro30.3K views•26 slides

Hacking Adobe Experience Manager sites

Hacking Adobe Experience Manager sites

Hacking Adobe Experience Manager sitesMikhail Egorov13.1K views•23 slides

Linux Device Tree

Linux Device Tree

Linux Device Tree艾鍗科技4.5K views•48 slides

What's hot(20)

EMBA - Firmware analysis - Black Hat Arsenal USA 2022

EMBA - Firmware analysis - Black Hat Arsenal USA 2022

EMBA - Firmware analysis - Black Hat Arsenal USA 2022

MichaelM85042•100 views

Linux Kernel Booting Process (2) - For NLKB

Linux Kernel Booting Process (2) - For NLKB

Linux Kernel Booting Process (2) - For NLKB

shimosawa•8.2K views

U-Boot - An universal bootloader

U-Boot - An universal bootloader

U-Boot - An universal bootloader

Emertxe Information Technologies Pvt Ltd•2.9K views

LCU13: An Introduction to ARM Trusted Firmware

LCU13: An Introduction to ARM Trusted Firmware

LCU13: An Introduction to ARM Trusted Firmware

Linaro•30.3K views

Hacking Adobe Experience Manager sites

Hacking Adobe Experience Manager sites

Hacking Adobe Experience Manager sites

Mikhail Egorov•13.1K views

Linux Device Tree

Linux Device Tree

Linux Device Tree

艾鍗科技•4.5K views

Anil Kumar Pugalia•9.8K views

Trusted firmware deep_dive_v1.0_

Trusted firmware deep_dive_v1.0_

Trusted firmware deep_dive_v1.0_

Linaro•9.9K views

Introduction to Modern U-Boot

Introduction to Modern U-Boot

Introduction to Modern U-Boot

GlobalLogic Ukraine•1.8K views

淺談探索 Linux 系統設計之道

淺談探索 Linux 系統設計之道

淺談探索 Linux 系統設計之道

National Cheng Kung University•11.2K views

Hunting for security bugs in AEM webapps

Hunting for security bugs in AEM webapps

Hunting for security bugs in AEM webapps

Mikhail Egorov•13.9K views

Virtual Security Lab Setup - OWASP Broken Web Apps, Webgoat, & ZAP

Virtual Security Lab Setup - OWASP Broken Web Apps, Webgoat, & ZAP

Virtual Security Lab Setup - OWASP Broken Web Apps, Webgoat, & ZAP

Michael Coates•277.9K views

syzkaller: the next gen kernel fuzzer

syzkaller: the next gen kernel fuzzer

syzkaller: the next gen kernel fuzzer

Dmitry Vyukov•82.5K views

siburu•8.9K views

Qemu JIT Code Generator and System Emulation

Qemu JIT Code Generator and System Emulation

Qemu JIT Code Generator and System Emulation

National Cheng Kung University•15.7K views

Linux kernel debugging

Linux kernel debugging

Linux kernel debugging

libfetion•10.3K views

Linux device drivers

Linux device drivers

Linux device drivers

Emertxe Information Technologies Pvt Ltd•41.2K views

malloc & vmalloc in Linux

malloc & vmalloc in Linux

malloc & vmalloc in Linux

Adrian Huang•922 views

Use After Free 脆弱性攻撃を試す

Use After Free 脆弱性攻撃を試す

Use After Free 脆弱性攻撃を試す

monochrojazz•6.6K views

Linux Kernel MMC Storage driver Overview

Linux Kernel MMC Storage driver Overview

Linux Kernel MMC Storage driver Overview

RajKumar Rampelli•17.4K views

Viewers also liked

Boot process: BIOS vs UEFI

Boot process: BIOS vs UEFI

Boot process: BIOS vs UEFIAlea Soluciones, S.L.11K views•10 slides

[DEFCON] Bypassing preboot authentication passwords by instrumenting the BIOS...

[DEFCON] Bypassing preboot authentication passwords by instrumenting the BIOS...

[DEFCON] Bypassing preboot authentication passwords by instrumenting the BIOS...Moabi.com2.2K views•56 slides

[Defcon24] Introduction to the Witchcraft Compiler Collection

[Defcon24] Introduction to the Witchcraft Compiler Collection

[Defcon24] Introduction to the Witchcraft Compiler CollectionMoabi.com2.9K views•67 slides

BIOS and Secure Boot Attacks Uncovered

BIOS and Secure Boot Attacks Uncovered

BIOS and Secure Boot Attacks UncoveredAlex Matrosov3.3K views•79 slides

Persistent BIOS Infection

Persistent BIOS Infection

Persistent BIOS Infectionguest042636991 views•19 slides

Integrated version control with Fossil SCM

Integrated version control with Fossil SCM

Integrated version control with Fossil SCMAshberk5.6K views•19 slides

Viewers also liked(20)

Boot process: BIOS vs UEFI

Boot process: BIOS vs UEFI

Boot process: BIOS vs UEFI

Alea Soluciones, S.L.•11K views

[DEFCON] Bypassing preboot authentication passwords by instrumenting the BIOS...

[DEFCON] Bypassing preboot authentication passwords by instrumenting the BIOS...

[DEFCON] Bypassing preboot authentication passwords by instrumenting the BIOS...

Moabi.com•2.2K views

[Defcon24] Introduction to the Witchcraft Compiler Collection

[Defcon24] Introduction to the Witchcraft Compiler Collection

[Defcon24] Introduction to the Witchcraft Compiler Collection

Moabi.com•2.9K views

BIOS and Secure Boot Attacks Uncovered

BIOS and Secure Boot Attacks Uncovered

BIOS and Secure Boot Attacks Uncovered

Alex Matrosov•3.3K views

Persistent BIOS Infection

Persistent BIOS Infection

Persistent BIOS Infection

guest042636•991 views

Integrated version control with Fossil SCM

Integrated version control with Fossil SCM

Integrated version control with Fossil SCM

Ashberk•5.6K views

LAS16-200: Firmware Summit - UEFI secure boot

LAS16-200: Firmware Summit - UEFI secure boot

LAS16-200: Firmware Summit - UEFI secure boot

Linaro•1.6K views

Attacking Windows Authentication and BitLocker Full Disk Encryption

Attacking Windows Authentication and BitLocker Full Disk Encryption

Attacking Windows Authentication and BitLocker Full Disk Encryption

Ian Haken•4.6K views

Hardware backdooring is practical

Hardware backdooring is practical

Hardware backdooring is practical

Moabi.com•1.2K views

[Blackhat2015] SMB : SHARING MORE THAN JUST YOUR FILES... #Whitepaper

[Blackhat2015] SMB : SHARING MORE THAN JUST YOUR FILES... #Whitepaper

[Blackhat2015] SMB : SHARING MORE THAN JUST YOUR FILES... #Whitepaper

Moabi.com•3.1K views

[HITB Malaysia 2011] Exploit Automation

[HITB Malaysia 2011] Exploit Automation

[HITB Malaysia 2011] Exploit Automation

Moabi.com•1.2K views

[Blackhat2015] FileCry attack against Internet Explorer

[Blackhat2015] FileCry attack against Internet Explorer

[Blackhat2015] FileCry attack against Internet Explorer

Moabi.com•1.4K views

Hardware backdooring is practical : slides

Hardware backdooring is practical : slides

Hardware backdooring is practical : slides

Moabi.com•1.3K views

Kaspersky Endpoint Security for Business 2015

Kaspersky Endpoint Security for Business 2015

Kaspersky Endpoint Security for Business 2015

Kaspersky•3.9K views

[Blackhat2015] SMB : SHARING MORE THAN JUST YOUR FILES...

[Blackhat2015] SMB : SHARING MORE THAN JUST YOUR FILES...

[Blackhat2015] SMB : SHARING MORE THAN JUST YOUR FILES...

Moabi.com•2K views

[Defcon] Hardware backdooring is practical

[Defcon] Hardware backdooring is practical

[Defcon] Hardware backdooring is practical

Moabi.com•130.1K views

Unified Extensible Firmware Interface (UEFI)

Unified Extensible Firmware Interface (UEFI)

Unified Extensible Firmware Interface (UEFI)

k33a•8K views

[Blackhat2015] FileCry attack against Java

[Blackhat2015] FileCry attack against Java

[Blackhat2015] FileCry attack against Java

Moabi.com•1.8K views

BlueHat 2014 - The Attacker's View of Windows Authentication and Post Exploit...

BlueHat 2014 - The Attacker's View of Windows Authentication and Post Exploit...

BlueHat 2014 - The Attacker's View of Windows Authentication and Post Exploit...

Benjamin Delpy•29.4K views

UEFI presentation

UEFI presentation

UEFI presentation

Bruno Cornec•5.2K views

Similar to [DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

DefCon 2012 - Hardware Backdooring (Slides)

DefCon 2012 - Hardware Backdooring (Slides)

DefCon 2012 - Hardware Backdooring (Slides)Michael Smith1.1K views•39 slides

[Hackito2012] Hardware backdooring is practical

[Hackito2012] Hardware backdooring is practical

[Hackito2012] Hardware backdooring is practicalMoabi.com1.4K views•37 slides

Bootkits: past, present & future

Bootkits: past, present & future

Bootkits: past, present & futureAlex Matrosov2.2K views•44 slides

Grub2 Booting Process

Grub2 Booting Process

Grub2 Booting ProcessMike Wang5.5K views•38 slides

Needle In An Encrypted Haystack: Forensics in a hardened environment (with Fu...

Needle In An Encrypted Haystack: Forensics in a hardened environment (with Fu...

Needle In An Encrypted Haystack: Forensics in a hardened environment (with Fu...Nicolas Collery50 views•44 slides

Bootkits: Past, Present & Future - Virus Bulletin

Bootkits: Past, Present & Future - Virus Bulletin

Bootkits: Past, Present & Future - Virus BulletinESET16.4K views•44 slides

Similar to [DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software) (20)

DefCon 2012 - Hardware Backdooring (Slides)

DefCon 2012 - Hardware Backdooring (Slides)

DefCon 2012 - Hardware Backdooring (Slides)

Michael Smith•1.1K views

[Hackito2012] Hardware backdooring is practical

[Hackito2012] Hardware backdooring is practical

[Hackito2012] Hardware backdooring is practical

Moabi.com•1.4K views

Bootkits: past, present & future

Bootkits: past, present & future

Bootkits: past, present & future

Alex Matrosov•2.2K views

Grub2 Booting Process

Grub2 Booting Process

Grub2 Booting Process

Mike Wang•5.5K views

Needle In An Encrypted Haystack: Forensics in a hardened environment (with Fu...

Needle In An Encrypted Haystack: Forensics in a hardened environment (with Fu...

Needle In An Encrypted Haystack: Forensics in a hardened environment (with Fu...

Nicolas Collery•50 views

Bootkits: Past, Present & Future - Virus Bulletin

Bootkits: Past, Present & Future - Virus Bulletin

Bootkits: Past, Present & Future - Virus Bulletin

ESET•16.4K views

Linux Booting Steps

Linux Booting Steps

Linux Booting Steps

Anando Kumar Paul•15.3K views

Secret of Intel Management Engine by Igor Skochinsky

Secret of Intel Management Engine by Igor Skochinsky

Secret of Intel Management Engine by Igor Skochinsky

CODE BLUE•177.3K views

Csw2017 bazhaniuk exploring_yoursystemdeeper_updated

Csw2017 bazhaniuk exploring_yoursystemdeeper_updated

Csw2017 bazhaniuk exploring_yoursystemdeeper_updated

CanSecWest•17.6K views

Linux kernel booting

Linux kernel booting

Linux kernel booting

Ramin Farajpour Cami•59 views

Let Me Pick Your Brain - Remote Forensics in Hardened Environments

Let Me Pick Your Brain - Remote Forensics in Hardened Environments

Let Me Pick Your Brain - Remote Forensics in Hardened Environments

Nicolas Collery•1.3K views

Raja Waseem Akhtar•826 views

Ch04 system administration

Ch04 system administration

Ch04 system administration

Raja Waseem Akhtar•839 views

Joanna Rutkowska Subverting Vista Kernel

Joanna Rutkowska Subverting Vista Kernel

Joanna Rutkowska Subverting Vista Kernel

guestf1a032•1.2K views

WinFE: The (Almost) Perfect Triage Tool

WinFE: The (Almost) Perfect Triage Tool

WinFE: The (Almost) Perfect Triage Tool

Brent Muir•13.9K views

An Insight into the Linux Booting Process

An Insight into the Linux Booting Process

An Insight into the Linux Booting Process

Hardeep Bhurji•2.2K views

BlueHat v17 || Betraying the BIOS: Where the Guardians of the BIOS are Failing

BlueHat v17 || Betraying the BIOS: Where the Guardians of the BIOS are Failing

BlueHat v17 || Betraying the BIOS: Where the Guardians of the BIOS are Failing

BlueHat Security Conference•861 views

Defeating x64: Modern Trends of Kernel-Mode Rootkits

Defeating x64: Modern Trends of Kernel-Mode Rootkits

Defeating x64: Modern Trends of Kernel-Mode Rootkits

Alex Matrosov•4.3K views

Bootloaders (U-Boot)

Bootloaders (U-Boot)

Bootloaders (U-Boot)

Omkar Rane•557 views

BeagleBone Black Booting Process

BeagleBone Black Booting Process

BeagleBone Black Booting Process

SysPlay eLearning Academy for You•18.2K views

More from Moabi.com

[2013 syscan360] Jonathan Brossard_katsuni理论介绍以及在沙盒和软件仿真方面的应用

[2013 syscan360] Jonathan Brossard_katsuni理论介绍以及在沙盒和软件仿真方面的应用

[2013 syscan360] Jonathan Brossard_katsuni理论介绍以及在沙盒和软件仿真方面的应用Moabi.com1.7K views•45 slides

[CCC-28c3] Post Memory Corruption Memory Analysis

[CCC-28c3] Post Memory Corruption Memory Analysis

[CCC-28c3] Post Memory Corruption Memory AnalysisMoabi.com2.5K views•94 slides

[Ruxcon Monthly Sydney 2011] Proprietary Protocols Reverse Engineering : Rese...

[Ruxcon Monthly Sydney 2011] Proprietary Protocols Reverse Engineering : Rese...

[Ruxcon Monthly Sydney 2011] Proprietary Protocols Reverse Engineering : Rese...Moabi.com1.2K views•64 slides

[Ruxcon 2011] Post Memory Corruption Memory Analysis

[Ruxcon 2011] Post Memory Corruption Memory Analysis

[Ruxcon 2011] Post Memory Corruption Memory AnalysisMoabi.com793 views•92 slides

[Kiwicon 2011] Post Memory Corruption Memory Analysis

[Kiwicon 2011] Post Memory Corruption Memory Analysis

[Kiwicon 2011] Post Memory Corruption Memory AnalysisMoabi.com807 views•84 slides

[h2hc] Generic exploitation of invalid memory writes

[h2hc] Generic exploitation of invalid memory writes

[h2hc] Generic exploitation of invalid memory writesMoabi.com1K views•29 slides

More from Moabi.com(8)

[2013 syscan360] Jonathan Brossard_katsuni理论介绍以及在沙盒和软件仿真方面的应用

[2013 syscan360] Jonathan Brossard_katsuni理论介绍以及在沙盒和软件仿真方面的应用

[2013 syscan360] Jonathan Brossard_katsuni理论介绍以及在沙盒和软件仿真方面的应用

Moabi.com•1.7K views

[CCC-28c3] Post Memory Corruption Memory Analysis

[CCC-28c3] Post Memory Corruption Memory Analysis

[CCC-28c3] Post Memory Corruption Memory Analysis

Moabi.com•2.5K views

[Ruxcon Monthly Sydney 2011] Proprietary Protocols Reverse Engineering : Rese...

[Ruxcon Monthly Sydney 2011] Proprietary Protocols Reverse Engineering : Rese...

[Ruxcon Monthly Sydney 2011] Proprietary Protocols Reverse Engineering : Rese...

Moabi.com•1.2K views

[Ruxcon 2011] Post Memory Corruption Memory Analysis

[Ruxcon 2011] Post Memory Corruption Memory Analysis

[Ruxcon 2011] Post Memory Corruption Memory Analysis

Moabi.com•793 views

[Kiwicon 2011] Post Memory Corruption Memory Analysis

[Kiwicon 2011] Post Memory Corruption Memory Analysis

[Kiwicon 2011] Post Memory Corruption Memory Analysis

Moabi.com•807 views

[h2hc] Generic exploitation of invalid memory writes

[h2hc] Generic exploitation of invalid memory writes

[h2hc] Generic exploitation of invalid memory writes

Moabi.com•1K views

[Ruxcon] Breaking virtualization by switching the cpu to virtual 8086 mode

[Ruxcon] Breaking virtualization by switching the cpu to virtual 8086 mode

[Ruxcon] Breaking virtualization by switching the cpu to virtual 8086 mode

Moabi.com•3K views

[HackInTheBox] Breaking virtualization by any means

[HackInTheBox] Breaking virtualization by any means

[HackInTheBox] Breaking virtualization by any means

Moabi.com•2.1K views

[DEFCON 16] Bypassing pre-boot authentication passwords by instrumenting the BIOS keyboard buffer (practical low level attacks against x86 pre-boot authentication software)

1.

3.

4.

5.

6. I-1) Boot sequence overview

7.

8.

9.

10. I-4) BIOS internals for keyboard management

11.

12.

13.

14.

15.

16.

17. SCOPE : In the following two sections, we assume the OS has fully booted and the attacker is given a local shell, but no physical access.

18.

19.

20.

21.

22.

23.

24.

25.

26.

27.

28. III-2) Getting the password from user land (4/4):

29.

30.

31.

32.

33.

34.

35.

36.

37. IV-1) Rebooting in spite of a preboot authentication password without disk encryption (2/2):

38.

39.

40.

41. IV-2-c) Methodology to install the rogue bootloader :

42. IV-2-d) “Invisible Man” roadmap :

43.

44. V – Examples of vulnerable softwares...

45.

46.

47.

48.

49.

50.

51.

52.

53.