Attack chaining for web exploitation
•Download as PPTX, PDF•
2 likes•1,077 views
Attack chaining involves using multiple vulnerabilities in sequence to cause greater impact. The speaker discusses how attackers use techniques like insecure direct object reference, parameter tampering, and cross-site request forgery together to perform illegal transactions from a victim's account or access unauthorized user details. To start chaining attacks, one must find more vulnerabilities in an application, understand how it works, analyze existing bugs, and create a story that leverages different vulnerabilities in a specific order. The speaker emphasizes that every vulnerability needs to be fixed and that weak code combined with weak configurations can enable large impacts.
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (20)
Similar to Attack chaining for web exploitation
Similar to Attack chaining for web exploitation (20)
More from n|u - The Open Security Community
More from n|u - The Open Security Community (20)
Recently uploaded
Recently uploaded (20)
Attack chaining for web exploitation
- 1. Attack chaining for web exploitation --- Abhijeth Dugginapeddi
- 2. #whoami Security Analyst at Adobe Systems Hacking since 14 and gave sessions in most engineering colleges Like many, found bugs in Google, Facebook, Yahoo, Microsoft and more than 50 sites. Among Top 5 Bug hunters in Synack A Telugu movie buff and a start up enthusiast
- 3. No organization or no company is responsible for whatever I talk for the next 30 minutes!!
- 6. How to start
- 7. Do you know him!!
- 10. Called up amazon and add a new credit card to amazon account Associated email Billing Address Random Credit card number Now they call again saying they lost the password Name Billing address Credit card number The attackers now got access to his amazon account
- 11. Billing address Last 4 digits of credit card
- 15. Chaining of web attacks • Used majorly by Real attackers • Understanding the application code and infrastructure in depth • Using multiple vulnerabilities • Knowledge on various technologies Impacts • Defacing sites • Denial of service • Deleting code, DBs, user profiles, customer data etc.
- 16. The other 42% of vulnerabilities are caused because of weak configurations/administration Only 58% of vulnerabilities are caused because of weak code Source: PTSecurity
- 17. Vulnerability in Code + Vulnerability in Configuration = Large Impact
- 18. Do you think a vulnerability like CSRF or Mixed content in isolation can directly lead to a Security breach?
- 19. May not be true. But a Security Breach is definitely possible if the attacker can chain these attacks
- 20. Normal attack
- 21. Attack chain
- 22. Vulnerabilities reported in a Web Application Mixed Content Unwanted methods allowed Cookie Flags missingURL Redirection Directory traversal Weak Ciphers Banner Grabbing Insecure Direct Object Reference
- 23. Few stories
- 24. This particular Request uses Insecure Transmission which will allow the attacker to sniff the request
- 25. Using BurpSuite Decoder, the encoded value is decoded in plain text
- 26. Encoded back by adding ‘ ‘or’ ‘1’ =‘1
- 28. Mixed Content Weak Encryption SQL Injection Complete credit card details
- 29. Targeted attack
- 30. Insecure Direct Object Reference
- 33. Cross Site Request Forgery
- 35. Insecure Direct Object Reference Parameter tampering CSRF Perform illegal transactions from a victim’s account Access control violation
- 36. Target= Abhijeth Abhijeth’s Bank Details Access to someone’s details Bruteforce and get Abhijeth’s details Use this details to make illegal transaction!!
- 37. Jo dar gaya samjo mar gaya
- 38. Some company’s email Inbox
- 39. Upload exe files
- 41. #begbounty!!!
- 43. Improper CSRF and Access controls
- 44. Spread malware using your application!!!
- 45. And then!!
- 49. PUT /foo
- 52. But no SHELL
- 54. Aise the bhayya bajrangi!!
- 55. Security misconfiguration Stored Cross Site Scripting Session Hijacking Privilege Escalation Arbitrary file upload Remote Code Execution
- 56. How can you start chaining?
- 57. Find more vulnerabilities Understand the application Analyze the bugs Research on customer’s business Make a story
- 58. Moral of the story!! Every vulnerability needs to fixed irrespective of the risk Remember it is Vulnerable Code + Weak Configuration
- 59. The other chains Infrastructure Chains Mobile chains Data center attacks Wireless hacks
- 60. Thanks
- 62. What to do with the bounties??
- 63. Educate a child
- 64. For more details
- 65. Questions??!!