No, you be the hacker !

1. NO, YOU be the hacker !
Maikel Ninaber
10/05/2016

2. 2Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Plan
 Part 1: Theory
• Intro
• FristiLeaks 1.3
• Web App security
• Web crawling
• Reverse shell
• Limitations
 Part 2: Workshop/Demo
• Lets get root

3. 3Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
FristiLeaks 1.3

4. 4Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Architecture

5. 5Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Web Apps

6. 6Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Web Apps

7. 7Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Web Apps

8. 8Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Web Apps

9. 9Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Web Apps

10. 10Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Web Apps

11. 11Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Web Apps

12. 12Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Architecture

13. 13Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Important for today

14. 14Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Web crawling

15. 15Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Reverse shell

16. 16Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Limitations
 Computer Fraud and Abuse Act
• Using a computer to intrude upon or steal something from another computer is illegal
 Unintended consequences, such as damaging hijacked computers belonging to
innocent individuals, while real criminals remain hidden several layers back on
the Internet (e.g., TOR)
 The only kind of hacking that's considered tolerable is what you might enact
defensively within your own computer or network. What’s clearly illegal are
offensive hacks, where you leave your territory and actively pursue an assailant
online.

17. 17Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Another Hacker goes to jail !

18. 18Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Demo

19. 19Copyright © 2016 Maikel Ninaber. All Rights Reserved
NO, YOU be the hacker ! | June 2016
Sources
 http://www.nearingkolob.com/here-are-some-of-the-new-area-plans-from-
around-the-world/
 https://en.wikipedia.org/wiki/Antisec_Movement#/media/File:Anti-
sec_manifesto.png
 http://www.inmotionhosting.com/support/website/restricting-bots/how-to-stop-
search-engines-from-crawling-your-website
 http://www.techrepublic.com/article/guide-to-using-noindex-nofollow-and-
disallow/
 http://stackoverflow.com/questions/12089157/how-to-hide-a-particular-website-
page-url-from-search-engines
 https://wltrimbl.github.io/2014-06-10-spelman/intermediate/shell/02-ssh.html
 http://vulnhub.com/entry/fristileaks-13,133
 https://www.youtube.com/watch?v=x5R34SXnRpk
 http://www.skorks.com/2009/08/different-types-of-encoding-schemes-a-primer/