Hogy jussunk ki lezárt hálózatokból?
•Download as PPTX, PDF•
0 likes•112 views
This document summarizes a presentation about escaping locked down networks. It discusses using tools like XFLTReaT to bypass network restrictions by tunneling traffic through unfiltered protocols. Specific techniques covered include changing the MAC address, using alternative gateways, exploiting misconfigured proxies or firewalls, and setting up tunnels through protocols like SSH, ICMP, or RDP. The presentation also demonstrates how to install and use XFLTReaT on Linux and Windows systems to test what protocols are unfiltered on a network.
Report
Share
Report
Share
Recommended
Balázs Bucsay - XFLTReaT: Building a Tunnel
XFLTReaT is an open-source tunnelling framework that handles all the boring stuff and offers the capability to the users to take care of only those things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customised on all traffic and it is also worth mentioning that the framework was designed to be easy to configure, use and develop. In case there is a need to send packets over ICMP, RDP or SSH then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 12km on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunnelling. It will be show how to tunnel data over a Windows jumpbox utilising RDP (including the dirty low level "secrets") or how to exfiltrate data over ICMP from barely secured networks. We have simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunnelling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, there is no need for any low-level packet fu and hassle. I guarantee that you won’t be disappointed with the tool and the talk, actually you will be richer with an open-source tool.
XFLTReaT: A New Dimension in Tunneling (Shakacon 2017)
XFLTReaT presentation from Shakacon 2017
https://www.youtube.com/watch?v=AfqNVXHz0hU
This presentation will sum up how to do tunneling with different protocols and will have different perspectives detailed. For example, companies are fighting hard to block exfiltration from their network: they use http(s) proxies, DLP, IPS technologies to protect their data, but are they protected against tunneling? There are so many interesting questions to answer for users, abusers, companies and malware researchers. Mitigation and bypass techniques will be shown you during this presentation, which can be used to filter any tunneling on your network or to bypass misconfigured filters.
Our new tool XFLTReaT is an open-source tunneling framework that handles all the boring stuff and gives users the capability to take care of only the things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customized on all traffic and it is also worth mentioning that the framework was designed to be easy to configure, use and develop. In case there is a need to send packets over ICMP type 0 or HTTPS TLS v1.2 with a special header, then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 33000ft on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunneling. While we needed to use different tunnels and VPNs for different protocols in the past like OpenVPN for TCP and UDP, ptunnel for ICMP or iodined for DNS tunneling, it changes now. After taking a look at these tools it was easy to see some commonality, all of them are doing the same things only the means of communication are different. We simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunneling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, there is no need for any low-level packet fu and hassle. I guarantee that you won’t be disappointed with the tool and the talk, actually you will be richer with an open-source tool.
XFLTReaT: A New Dimension In Tunnelling (DeepSec 2017)
XFLTReaT presentation from DeepSec 2017
This presentation will sum up how to do tunnelling with different protocols and will feature different perspectives in detail. For example, companies are fighting hard to block exfiltration from their network: They use http(s) proxies, DLP, IPS technologies to protect their data, but are they protected against tunnelling? There are so many interesting questions to answer for users, abusers, companies and malware researchers. During this presentation we'll show you some mitigation and bypass techniques, which can be used to filter any tunnelling on your network or to bypass misconfigured filters.
Our new tool XFLTReaT is an open-source tunnelling framework that handles all the boring stuff and gives users the capability to take care of only the things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customised on all traffic, and it is also worth mentioning that the framework was designed to be easy to configure, use and develop.
In case there is a need to send packets over ICMP type 0 or HTTPS TLS v1.2 with a special header, then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 33000ft on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunnelling. While we needed to use different tunnels and VPNs for different protocols in the past, like OpenVPN for TCP and UDP, ptunnel for ICMP or iodined for DNS tunnelling, this changes now:
After taking a look at these tools it was easy to see some commonality. All of them are doing the same things only the means of communication are different. We simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunnelling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, so there is no need for any low-level packet fu and hassle.
I guarantee that you won’t be disappointed with the tool and the talk, actually you will be an open-source tool richer.
XFLTReaT: A New Dimension in Tunnelling (HITB GSEC 2017)
XFLTReaT presentation from Hack In The Box GSEC 2017
https://www.youtube.com/watch?v=6EU_RLb2YxI
XFLTReaT is an open-source tunnelling framework that handles all the boring stuff and gives users the capability to take care of only the things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customised on all traffic and it is also worth mentioning that the framework was designed to be easy to configure, use and develop. In case there is a need to send packets over ICMP type 0 or HTTPS TLS v1.2 with a special header, then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 33000ft on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunnelling. While we needed to use different tunnels and VPNs for different protocols in the past like OpenVPN for TCP and UDP, ptunnel for ICMP or iodined for DNS tunnelling, it changes now. After taking a look at these tools it was easy to see some commonality, all of them are doing the same things only the means of communication are different. We simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunnelling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, there is no need for any low-level packet fu and hassle. I guarantee that you won’t be disappointed with the tool and the talk, actually you will be richer with an open-source tool.
XFLTReaT: a new dimension in tunnelling (BruCON 0x09 2017)
XFLTReaT presentation from BruCON 0x09 2017
https://www.youtube.com/watch?v=0hnxgu8lkfc
This presentation will sum up how to do tunnelling with different protocols and will have different perspectives detailed. For example, companies are fighting hard to block exfiltration from their network: they use http(s) proxies, DLP, IPS technologies to protect their data, but are they protected against tunnelling? There are so many interesting questions to answer for users, abusers, companies and malware researchers. Mitigation and bypass techniques will be shown you during this presentation, which can be used to filter any tunnelling on your network or to bypass misconfigured filters.
Our new tool XFLTReaT is an open-source tunnelling framework that handles all the boring stuff and gives users the capability to take care of only the things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customised on all traffic and it is also worth mentioning that the framework was designed to be easy to configure, use and develop. In case there is a need to send packets over ICMP type 0 or HTTPS TLS v1.2 with a special header, then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 33000ft on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunnelling. While we needed to use different tunnels and VPNs for different protocols in the past like OpenVPN for TCP and UDP, ptunnel for ICMP or iodined for DNS tunnelling, it changes now. After taking a look at these tools it was easy to see some commonality, all of them are doing the same things only the means of communication are different. We simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunnelling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, there is no need for any low-level packet fu and hassle. I guarantee that you won’t be disappointed with the tool and the talk, actually you will be richer with an open-source tool.
Trick or XFLTReaT a.k.a. Tunnel All The Things
XFLTReaT presentation from RuxCon 2017
This presentation will sum up how to do tunnelling with different protocols and will have different perspectives detailed. For example, companies are fighting hard to block exfiltration from their network: they use http(s) proxies, DLP, IPS technologies to protect their data, but are they protected against tunnelling? There are so many interesting questions to answer for users, abusers, companies and malware researchers. Mitigation and bypass techniques will be shown you during this presentation, which can be used to filter any tunnelling on your network or to bypass misconfigured filters.
Our new tool XFLTReaT is an open-source tunnelling framework that handles all the boring stuff and gives users the capability to take care of only the things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customised on all traffic and it is also worth mentioning that the framework was designed to be easy to configure, use and develop. In case there is a need to send packets over ICMP type 0 or HTTPS TLS v1.2 with a special header, then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 33000ft on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunnelling. While we needed to use different tunnels and VPNs for different protocols in the past like OpenVPN for TCP and UDP, ptunnel for ICMP or iodined for DNS tunnelling, it changes now. After taking a look at these tools it was easy to see some commonality, all of them are doing the same things only the means of communication are different. We simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunnelling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, there is no need for any low-level packet fu and hassle. I guarantee that you won’t be disappointed with the tool and the talk, actually you will be richer with an open-source tool.
China.z / Trojan.XorDDOS - Analysis of a hack
Analyzing the hack of a Debian based system with the Trojan.XorDDOS witg some China.z thrown in the mix.
Build and deployment
This document discusses various tools and techniques for building and deploying software, including Git, Git hooks, Puppet, native packages, and Maven. It provides examples of using post-receive Git hooks to deploy code to servers, configuring Puppet modules to install packages and configure services, creating native packages with tools like fpm and Ant, and bundling deployment scripts within packages.
Recommended
Balázs Bucsay - XFLTReaT: Building a Tunnel
XFLTReaT is an open-source tunnelling framework that handles all the boring stuff and offers the capability to the users to take care of only those things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customised on all traffic and it is also worth mentioning that the framework was designed to be easy to configure, use and develop. In case there is a need to send packets over ICMP, RDP or SSH then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 12km on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunnelling. It will be show how to tunnel data over a Windows jumpbox utilising RDP (including the dirty low level "secrets") or how to exfiltrate data over ICMP from barely secured networks. We have simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunnelling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, there is no need for any low-level packet fu and hassle. I guarantee that you won’t be disappointed with the tool and the talk, actually you will be richer with an open-source tool.
XFLTReaT: A New Dimension in Tunneling (Shakacon 2017)
XFLTReaT presentation from Shakacon 2017
https://www.youtube.com/watch?v=AfqNVXHz0hU
This presentation will sum up how to do tunneling with different protocols and will have different perspectives detailed. For example, companies are fighting hard to block exfiltration from their network: they use http(s) proxies, DLP, IPS technologies to protect their data, but are they protected against tunneling? There are so many interesting questions to answer for users, abusers, companies and malware researchers. Mitigation and bypass techniques will be shown you during this presentation, which can be used to filter any tunneling on your network or to bypass misconfigured filters.
Our new tool XFLTReaT is an open-source tunneling framework that handles all the boring stuff and gives users the capability to take care of only the things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customized on all traffic and it is also worth mentioning that the framework was designed to be easy to configure, use and develop. In case there is a need to send packets over ICMP type 0 or HTTPS TLS v1.2 with a special header, then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 33000ft on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunneling. While we needed to use different tunnels and VPNs for different protocols in the past like OpenVPN for TCP and UDP, ptunnel for ICMP or iodined for DNS tunneling, it changes now. After taking a look at these tools it was easy to see some commonality, all of them are doing the same things only the means of communication are different. We simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunneling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, there is no need for any low-level packet fu and hassle. I guarantee that you won’t be disappointed with the tool and the talk, actually you will be richer with an open-source tool.
XFLTReaT: A New Dimension In Tunnelling (DeepSec 2017)
XFLTReaT presentation from DeepSec 2017
This presentation will sum up how to do tunnelling with different protocols and will feature different perspectives in detail. For example, companies are fighting hard to block exfiltration from their network: They use http(s) proxies, DLP, IPS technologies to protect their data, but are they protected against tunnelling? There are so many interesting questions to answer for users, abusers, companies and malware researchers. During this presentation we'll show you some mitigation and bypass techniques, which can be used to filter any tunnelling on your network or to bypass misconfigured filters.
Our new tool XFLTReaT is an open-source tunnelling framework that handles all the boring stuff and gives users the capability to take care of only the things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customised on all traffic, and it is also worth mentioning that the framework was designed to be easy to configure, use and develop.
In case there is a need to send packets over ICMP type 0 or HTTPS TLS v1.2 with a special header, then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 33000ft on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunnelling. While we needed to use different tunnels and VPNs for different protocols in the past, like OpenVPN for TCP and UDP, ptunnel for ICMP or iodined for DNS tunnelling, this changes now:
After taking a look at these tools it was easy to see some commonality. All of them are doing the same things only the means of communication are different. We simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunnelling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, so there is no need for any low-level packet fu and hassle.
I guarantee that you won’t be disappointed with the tool and the talk, actually you will be an open-source tool richer.
XFLTReaT: A New Dimension in Tunnelling (HITB GSEC 2017)
XFLTReaT presentation from Hack In The Box GSEC 2017
https://www.youtube.com/watch?v=6EU_RLb2YxI
XFLTReaT is an open-source tunnelling framework that handles all the boring stuff and gives users the capability to take care of only the things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customised on all traffic and it is also worth mentioning that the framework was designed to be easy to configure, use and develop. In case there is a need to send packets over ICMP type 0 or HTTPS TLS v1.2 with a special header, then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 33000ft on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunnelling. While we needed to use different tunnels and VPNs for different protocols in the past like OpenVPN for TCP and UDP, ptunnel for ICMP or iodined for DNS tunnelling, it changes now. After taking a look at these tools it was easy to see some commonality, all of them are doing the same things only the means of communication are different. We simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunnelling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, there is no need for any low-level packet fu and hassle. I guarantee that you won’t be disappointed with the tool and the talk, actually you will be richer with an open-source tool.
XFLTReaT: a new dimension in tunnelling (BruCON 0x09 2017)
XFLTReaT presentation from BruCON 0x09 2017
https://www.youtube.com/watch?v=0hnxgu8lkfc
This presentation will sum up how to do tunnelling with different protocols and will have different perspectives detailed. For example, companies are fighting hard to block exfiltration from their network: they use http(s) proxies, DLP, IPS technologies to protect their data, but are they protected against tunnelling? There are so many interesting questions to answer for users, abusers, companies and malware researchers. Mitigation and bypass techniques will be shown you during this presentation, which can be used to filter any tunnelling on your network or to bypass misconfigured filters.
Our new tool XFLTReaT is an open-source tunnelling framework that handles all the boring stuff and gives users the capability to take care of only the things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customised on all traffic and it is also worth mentioning that the framework was designed to be easy to configure, use and develop. In case there is a need to send packets over ICMP type 0 or HTTPS TLS v1.2 with a special header, then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 33000ft on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunnelling. While we needed to use different tunnels and VPNs for different protocols in the past like OpenVPN for TCP and UDP, ptunnel for ICMP or iodined for DNS tunnelling, it changes now. After taking a look at these tools it was easy to see some commonality, all of them are doing the same things only the means of communication are different. We simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunnelling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, there is no need for any low-level packet fu and hassle. I guarantee that you won’t be disappointed with the tool and the talk, actually you will be richer with an open-source tool.
Trick or XFLTReaT a.k.a. Tunnel All The Things
XFLTReaT presentation from RuxCon 2017
This presentation will sum up how to do tunnelling with different protocols and will have different perspectives detailed. For example, companies are fighting hard to block exfiltration from their network: they use http(s) proxies, DLP, IPS technologies to protect their data, but are they protected against tunnelling? There are so many interesting questions to answer for users, abusers, companies and malware researchers. Mitigation and bypass techniques will be shown you during this presentation, which can be used to filter any tunnelling on your network or to bypass misconfigured filters.
Our new tool XFLTReaT is an open-source tunnelling framework that handles all the boring stuff and gives users the capability to take care of only the things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customised on all traffic and it is also worth mentioning that the framework was designed to be easy to configure, use and develop. In case there is a need to send packets over ICMP type 0 or HTTPS TLS v1.2 with a special header, then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 33000ft on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunnelling. While we needed to use different tunnels and VPNs for different protocols in the past like OpenVPN for TCP and UDP, ptunnel for ICMP or iodined for DNS tunnelling, it changes now. After taking a look at these tools it was easy to see some commonality, all of them are doing the same things only the means of communication are different. We simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunnelling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, there is no need for any low-level packet fu and hassle. I guarantee that you won’t be disappointed with the tool and the talk, actually you will be richer with an open-source tool.
China.z / Trojan.XorDDOS - Analysis of a hack
Analyzing the hack of a Debian based system with the Trojan.XorDDOS witg some China.z thrown in the mix.
Build and deployment
This document discusses various tools and techniques for building and deploying software, including Git, Git hooks, Puppet, native packages, and Maven. It provides examples of using post-receive Git hooks to deploy code to servers, configuring Puppet modules to install packages and configure services, creating native packages with tools like fpm and Ant, and bundling deployment scripts within packages.
Using Nagios to monitor your WO systems
Nagios is an open source monitoring tool that has been available since 1999. It is commonly used to monitor servers, services, and applications. The document discusses how to install and configure Nagios on various platforms like CentOS, Ubuntu, and Mac OS X. It also provides examples of how to monitor common services like HTTP, MySQL, disk space, and custom applications using Nagios plugins. Graphing and alerting capabilities are discussed as well. The presentation concludes with a demonstration and Q&A section.
.NET on Linux: Entity Framework Core 1.0
Don Schenck
Director of Developer Experience for Red Hat
All Things Open
October 26-27, 2016
Raleigh, North Carolina
Powering up on power shell avengercon - 2018
This document provides information about a PowerShell presentation titled "Powering up on PowerShell". It includes the wireless network credentials to access the demo environment, a link to demo files, an agenda for the presentation topics, and a brief biography of the presenter. Some of the topics to be covered in the presentation include moving around the file system and registry, hashing, data storage techniques, custom event logging, WinRM logging, port scanning, and achieving persistence through PowerShell profiles.
UCL All of the Things (MeetBSD California 2014 Lightning Talk)
Watch the video here: http://bit.ly/1tFiTDM
These are the slides for Allan Jude's lightning talk, "UCL All of the Things", given at MeetBSD California 2014 in San Jose.
Visit www.iXsystems.com or www.MeetBSD.com to learn more.
Windows Kernel Exploitation : This Time Font hunt you down in 4 bytes
The document discusses exploiting TrueType font (TTF) vulnerabilities to achieve kernel code execution on Windows systems. It begins by describing the discovery of exploitable bugs in a TTF fuzzer. Despite mitigations like KASLR, NX, SMAP, and CFG, the researchers were able to bypass these protections through techniques like controlled overflows, abusing plain kernel structures, and function-driven attacks. They show how to leverage wild overflows, control kernel memory layout, and hijack control flow to achieve arbitrary code execution. The document emphasizes that OS design weaknesses allow bypassing modern defenses through clever bug chaining and memory manipulation.
Your Inner Sysadmin - MidwestPHP 2015
One thing that most programmers do not take the time to understand is the servers that their application lives on. Most know a smattering of Apache configs, PHP configs, and basic information about the OS. This talk will deal with looking at tools that can help you quickly set up a server and how it can help you be a better developer. We'll look at tools like Puppet for server management, OSSEC for log management, different command line tools, and Nagios/Monit for system monitoring.
Common technique in Bypassing Stuff in Python.
This document discusses bypassing antivirus detection in Python by using its ability to call functions in DLLs and shared libraries via ctypes. It provides examples of using ctypes to call Windows API functions like MessageBoxA, WinExec to launch calc.exe, and chaining VirtualAlloc, WriteProcessMemory, CreateThread and WaitForSingleObject to execute shellcode in-memory and bypass antivirus. The document suggests this technique can be used for post-exploitation and antivirus bypass. It also mentions freezing the Python code into an executable and provides references on Windows shellcoding.
Can We Prevent Use-after-free Attacks?
This document discusses use-after-free attacks and ways to prevent them. It begins with an introduction to dynamic memory allocation and how freed memory can be reallocated. It then explains how dangling pointers can be used to hijack memory and execute arbitrary code through use-after-free vulnerabilities. Several real-world examples are provided. The document discusses various techniques programmers can use to prevent these attacks, such as smart pointers, immediately nullifying freed pointers, and compiler security checks. It also covers operating system defenses like Control Flow Guard on Windows and AddressSanitizer on Linux. The talk concludes with recommendations on comprehensive mitigations through secure coding practices and system hardening.
Injection on Steroids: Codeless code injection and 0-day techniques
This document discusses techniques for injecting code into processes without directly writing code to the target process's memory. It introduces a technique called "Trap Frame Injection" which hijacks the CPU's user mode state that is stored in trap frames during system calls. It also presents a "Codeless Code Injection" technique which builds ROP chains on the user stack and manipulates the stack pointer to trigger execution without direct code writes. Challenges with this approach like getting return values and avoiding deadlocks are also outlined along with solutions like using a device handle callback or creating a dedicated thread.
LXC, Docker, and the future of software delivery | LinuxCon 2013
This document discusses Linux containers and Docker. It describes how Linux containers provide isolation using namespaces and cgroups to allow applications to run consistently across different environments. Docker builds on Linux containers to make them easy to use, create, share, and deploy. Docker allows building images from Dockerfiles, sharing images in registries, and developing hybrid cloud workflows. The document outlines Docker's roadmap and growing ecosystem of tools and projects building on Docker.
The linux kernel hidden inside windows 10
The document discusses the architectural overview of the Linux kernel hidden inside Windows 10. It describes the components that enable running Linux processes as "Pico processes" inside Windows, including the LXCORE kernel driver that implements the Linux ABI and API, and the LXSSMANAGER user-mode service that provides the external interface. The document outlines the initialization and functionality of these components, such as how they implement system calls, virtual file systems, and inter-process communication between Linux and Windows processes.
Salt at school
This document discusses the deployment of Salt configuration management software across two school computer labs to standardize systems and reduce maintenance costs. Salt was used to automate the installation of Ubuntu, additional educational software, and configurations across over 45 computers with limited IT staff. Key benefits included easy replication of changes, enforcing a consistent state, and reducing hardware replacement needs. The architecture and modules of Salt allowed for flexible configuration and extension through Python scripts.
OpenZFS - BSDcan 2014
This document provides information about the OpenZFS project and development process. It discusses OpenZFS features like feature flags and performance improvements. It also outlines the development process for illumos, FreeBSD, and Linux, including how to submit code changes through mailing lists or pull requests. Finally, it mentions work-in-progress on large block support to improve performance.
Burp Suite Extensions
These slides discuss the WHEN and HOW of various common and special purpose extensions in Burp Suite for application security testing. It was presented in Null Bangalore as a Puliya session by Neelu Tripathy.
Bypassing patchguard on Windows 8.1 and Windows 10
This document discusses techniques used by Patchguard, a mechanism in Windows 8.1 and 10 that protects the kernel from modifications. Patchguard uses code obfuscation, anti-debugging tricks, and periodic checksum validation to prevent unauthorized kernel patches. The document outlines various approaches that could be used to bypass Patchguard such as patching the kernel image, hooking functions, modifying checkers, or descheduling the context verification processes used by Patchguard. It provides details on specific functions and methods involved in Patchguard's context verification and suggests ways these could be descheduled to bypass the mechanism.
From P0W3R to SH3LL
This document provides an overview of using PowerShell for offensive security purposes. It discusses PowerShell syntax, common commands, and various open source tools and frameworks like PowerSploit, Empire, BloodHound, and Nishang that can be used for tasks like reconnaissance, gaining access, maintaining access, and privilege escalation on Windows systems. The document also provides examples of using PowerShell to bypass execution policies and obfuscate scripts to avoid detection.
Keynote - Fluentd meetup v14
Keynote on Fluentd Meetup Summer
Related Slide
- Fluentd ServerEngine Integration & Windows Support http://www.slideshare.net/RittaNarita/fluentd-meetup-2016-serverengine-integration-windows-support
- Fluentd v0.14 Plugin API Details http://www.slideshare.net/tagomoris/fluentd-v014-plugin-api-details
OpenZFS code repository
Discussion of a platform-independent OpenZFS code repository at the 2013 OpenZFS Developer Summit.
http://www.open-zfs.org/wiki/OpenZFS_Developer_Summit
Project Basecamp: News From Camp 4
Reid Wightman's presentation at AppSec DC 2012. Reid provides background and the lates on Digital Bond's Project Basecamp. New PLC exploit modules include a Stuxnet-type attack on the Modicon Quantum.
Containers: Anti Pattern
Docker has taken the IT industry by storm, and undeniably it is one of the most popular technologies these days. Docker is being adopted widely because of its simplicity to develop, test and deploy. It is loved by DevOps community as it is inherently designed to build once and deploy in different environment multiple times. The docker containers are ideal deployment units in Microservice Architecture (MSA) because it is very easy to spin new containers and scale them up and down as per the need. Though Docker has such a widespread adoption and it solves many industrial use cases, there are many containerization anti-patterns emerging due to the misunderstanding of containerization. In this talk we will explore: some of the anti-patterns, symptoms to identify those anti-patterns and the solution.
Deployment of WebObjects applications on CentOS Linux
With the rise of cloud computing and the death of the Xserve, learn how you can deploy your WebObjects applications on a CentOS server. You will also get tips about how to secure your server so that you don't get hack.
XFLTReat: a new dimension in tunnelling
This presentation will sum up how to do tunnelling with different protocols and will have different perspectives detailed. For example, companies are fighting hard to block exfiltration from their network: they use http(s) proxies, DLP, IPS technologies to protect their data, but are they protected against tunnelling? There are so many interesting questions to answer for users, abusers, companies and malware researchers. Mitigation and bypass techniques will be shown you during this presentation, which can be used to filter any tunnelling on your network or to bypass misconfigured filters.
More Related Content
What's hot
Using Nagios to monitor your WO systems
Nagios is an open source monitoring tool that has been available since 1999. It is commonly used to monitor servers, services, and applications. The document discusses how to install and configure Nagios on various platforms like CentOS, Ubuntu, and Mac OS X. It also provides examples of how to monitor common services like HTTP, MySQL, disk space, and custom applications using Nagios plugins. Graphing and alerting capabilities are discussed as well. The presentation concludes with a demonstration and Q&A section.
.NET on Linux: Entity Framework Core 1.0
Don Schenck
Director of Developer Experience for Red Hat
All Things Open
October 26-27, 2016
Raleigh, North Carolina
Powering up on power shell avengercon - 2018
This document provides information about a PowerShell presentation titled "Powering up on PowerShell". It includes the wireless network credentials to access the demo environment, a link to demo files, an agenda for the presentation topics, and a brief biography of the presenter. Some of the topics to be covered in the presentation include moving around the file system and registry, hashing, data storage techniques, custom event logging, WinRM logging, port scanning, and achieving persistence through PowerShell profiles.
UCL All of the Things (MeetBSD California 2014 Lightning Talk)
Watch the video here: http://bit.ly/1tFiTDM
These are the slides for Allan Jude's lightning talk, "UCL All of the Things", given at MeetBSD California 2014 in San Jose.
Visit www.iXsystems.com or www.MeetBSD.com to learn more.
Windows Kernel Exploitation : This Time Font hunt you down in 4 bytes
The document discusses exploiting TrueType font (TTF) vulnerabilities to achieve kernel code execution on Windows systems. It begins by describing the discovery of exploitable bugs in a TTF fuzzer. Despite mitigations like KASLR, NX, SMAP, and CFG, the researchers were able to bypass these protections through techniques like controlled overflows, abusing plain kernel structures, and function-driven attacks. They show how to leverage wild overflows, control kernel memory layout, and hijack control flow to achieve arbitrary code execution. The document emphasizes that OS design weaknesses allow bypassing modern defenses through clever bug chaining and memory manipulation.
Your Inner Sysadmin - MidwestPHP 2015
One thing that most programmers do not take the time to understand is the servers that their application lives on. Most know a smattering of Apache configs, PHP configs, and basic information about the OS. This talk will deal with looking at tools that can help you quickly set up a server and how it can help you be a better developer. We'll look at tools like Puppet for server management, OSSEC for log management, different command line tools, and Nagios/Monit for system monitoring.
Common technique in Bypassing Stuff in Python.
This document discusses bypassing antivirus detection in Python by using its ability to call functions in DLLs and shared libraries via ctypes. It provides examples of using ctypes to call Windows API functions like MessageBoxA, WinExec to launch calc.exe, and chaining VirtualAlloc, WriteProcessMemory, CreateThread and WaitForSingleObject to execute shellcode in-memory and bypass antivirus. The document suggests this technique can be used for post-exploitation and antivirus bypass. It also mentions freezing the Python code into an executable and provides references on Windows shellcoding.
Can We Prevent Use-after-free Attacks?
This document discusses use-after-free attacks and ways to prevent them. It begins with an introduction to dynamic memory allocation and how freed memory can be reallocated. It then explains how dangling pointers can be used to hijack memory and execute arbitrary code through use-after-free vulnerabilities. Several real-world examples are provided. The document discusses various techniques programmers can use to prevent these attacks, such as smart pointers, immediately nullifying freed pointers, and compiler security checks. It also covers operating system defenses like Control Flow Guard on Windows and AddressSanitizer on Linux. The talk concludes with recommendations on comprehensive mitigations through secure coding practices and system hardening.
Injection on Steroids: Codeless code injection and 0-day techniques
This document discusses techniques for injecting code into processes without directly writing code to the target process's memory. It introduces a technique called "Trap Frame Injection" which hijacks the CPU's user mode state that is stored in trap frames during system calls. It also presents a "Codeless Code Injection" technique which builds ROP chains on the user stack and manipulates the stack pointer to trigger execution without direct code writes. Challenges with this approach like getting return values and avoiding deadlocks are also outlined along with solutions like using a device handle callback or creating a dedicated thread.
LXC, Docker, and the future of software delivery | LinuxCon 2013
This document discusses Linux containers and Docker. It describes how Linux containers provide isolation using namespaces and cgroups to allow applications to run consistently across different environments. Docker builds on Linux containers to make them easy to use, create, share, and deploy. Docker allows building images from Dockerfiles, sharing images in registries, and developing hybrid cloud workflows. The document outlines Docker's roadmap and growing ecosystem of tools and projects building on Docker.
The linux kernel hidden inside windows 10
The document discusses the architectural overview of the Linux kernel hidden inside Windows 10. It describes the components that enable running Linux processes as "Pico processes" inside Windows, including the LXCORE kernel driver that implements the Linux ABI and API, and the LXSSMANAGER user-mode service that provides the external interface. The document outlines the initialization and functionality of these components, such as how they implement system calls, virtual file systems, and inter-process communication between Linux and Windows processes.
Salt at school
This document discusses the deployment of Salt configuration management software across two school computer labs to standardize systems and reduce maintenance costs. Salt was used to automate the installation of Ubuntu, additional educational software, and configurations across over 45 computers with limited IT staff. Key benefits included easy replication of changes, enforcing a consistent state, and reducing hardware replacement needs. The architecture and modules of Salt allowed for flexible configuration and extension through Python scripts.
OpenZFS - BSDcan 2014
This document provides information about the OpenZFS project and development process. It discusses OpenZFS features like feature flags and performance improvements. It also outlines the development process for illumos, FreeBSD, and Linux, including how to submit code changes through mailing lists or pull requests. Finally, it mentions work-in-progress on large block support to improve performance.
Burp Suite Extensions
These slides discuss the WHEN and HOW of various common and special purpose extensions in Burp Suite for application security testing. It was presented in Null Bangalore as a Puliya session by Neelu Tripathy.
Bypassing patchguard on Windows 8.1 and Windows 10
This document discusses techniques used by Patchguard, a mechanism in Windows 8.1 and 10 that protects the kernel from modifications. Patchguard uses code obfuscation, anti-debugging tricks, and periodic checksum validation to prevent unauthorized kernel patches. The document outlines various approaches that could be used to bypass Patchguard such as patching the kernel image, hooking functions, modifying checkers, or descheduling the context verification processes used by Patchguard. It provides details on specific functions and methods involved in Patchguard's context verification and suggests ways these could be descheduled to bypass the mechanism.
From P0W3R to SH3LL
This document provides an overview of using PowerShell for offensive security purposes. It discusses PowerShell syntax, common commands, and various open source tools and frameworks like PowerSploit, Empire, BloodHound, and Nishang that can be used for tasks like reconnaissance, gaining access, maintaining access, and privilege escalation on Windows systems. The document also provides examples of using PowerShell to bypass execution policies and obfuscate scripts to avoid detection.
Keynote - Fluentd meetup v14
Keynote on Fluentd Meetup Summer
Related Slide
- Fluentd ServerEngine Integration & Windows Support http://www.slideshare.net/RittaNarita/fluentd-meetup-2016-serverengine-integration-windows-support
- Fluentd v0.14 Plugin API Details http://www.slideshare.net/tagomoris/fluentd-v014-plugin-api-details
OpenZFS code repository
Discussion of a platform-independent OpenZFS code repository at the 2013 OpenZFS Developer Summit.
http://www.open-zfs.org/wiki/OpenZFS_Developer_Summit
Project Basecamp: News From Camp 4
Reid Wightman's presentation at AppSec DC 2012. Reid provides background and the lates on Digital Bond's Project Basecamp. New PLC exploit modules include a Stuxnet-type attack on the Modicon Quantum.
Containers: Anti Pattern
Docker has taken the IT industry by storm, and undeniably it is one of the most popular technologies these days. Docker is being adopted widely because of its simplicity to develop, test and deploy. It is loved by DevOps community as it is inherently designed to build once and deploy in different environment multiple times. The docker containers are ideal deployment units in Microservice Architecture (MSA) because it is very easy to spin new containers and scale them up and down as per the need. Though Docker has such a widespread adoption and it solves many industrial use cases, there are many containerization anti-patterns emerging due to the misunderstanding of containerization. In this talk we will explore: some of the anti-patterns, symptoms to identify those anti-patterns and the solution.
What's hot (20)
UCL All of the Things (MeetBSD California 2014 Lightning Talk)
UCL All of the Things (MeetBSD California 2014 Lightning Talk)
Windows Kernel Exploitation : This Time Font hunt you down in 4 bytes
Windows Kernel Exploitation : This Time Font hunt you down in 4 bytes
Injection on Steroids: Codeless code injection and 0-day techniques
Injection on Steroids: Codeless code injection and 0-day techniques
LXC, Docker, and the future of software delivery | LinuxCon 2013
LXC, Docker, and the future of software delivery | LinuxCon 2013
Bypassing patchguard on Windows 8.1 and Windows 10
Bypassing patchguard on Windows 8.1 and Windows 10
Similar to Hogy jussunk ki lezárt hálózatokból?
Deployment of WebObjects applications on CentOS Linux
With the rise of cloud computing and the death of the Xserve, learn how you can deploy your WebObjects applications on a CentOS server. You will also get tips about how to secure your server so that you don't get hack.
XFLTReat: a new dimension in tunnelling
This presentation will sum up how to do tunnelling with different protocols and will have different perspectives detailed. For example, companies are fighting hard to block exfiltration from their network: they use http(s) proxies, DLP, IPS technologies to protect their data, but are they protected against tunnelling? There are so many interesting questions to answer for users, abusers, companies and malware researchers. Mitigation and bypass techniques will be shown you during this presentation, which can be used to filter any tunnelling on your network or to bypass misconfigured filters.
Vorontsov, golovko ssrf attacks and sockets. smorgasbord of vulnerabilities
This document summarizes vulnerabilities related to server-side request forgery (SSRF) attacks and how they can be exploited. It discusses how external network access and internal network access can be obtained through SSRF. It provides examples of vulnerabilities in various protocols like HTTP, FTP, TFTP, and protocols used by services like Memcached, databases, and file uploads. It also describes how file descriptors can be used to write to open sockets or files to forge server responses or inject malicious content. Overall, the document is an overview of real-world SSRF attacks and exploitation techniques.
[HES2013] Virtually secure, analysis to remote root 0day on an industry leadi...
Today most networks present one “gateway” to the whole network – The SSL-VPN. A vector that is often overlooked and considered “secure”, we decided to take apart an industry leading SSL-VPN appliance and analyze it to bits to thoroughly understand how secure it really is. During this talk we will examine the internals of the F5 FirePass SSL-VPN Appliance. We discover that even though many security protections are in-place, the internals of the appliance hides interesting vulnerabilities we can exploit. Through processes ranging from reverse engineering to binary planting, we decrypt the file-system and begin examining the environment. As we go down the rabbit hole, our misconceptions about “security appliances” are revealed.
Using a combination of web vulnerabilities, format string vulnerabilities and a bunch of frustration, we manage to overcome the multiple limitations and protections presented by the appliance to gain a remote unauthenticated root shell. Due to the magnitude of this vulnerability and the potential for impact against dozens of fortune 500 companies, we contacted F5 and received one of the best vendor responses we’ve experienced – EVER!
https://www.hackitoergosum.org
Powering up on PowerShell - BSides Greenville 2019
This document summarizes a PowerShell presentation given at Bsides Greenville 2019. It provides wireless network credentials, links to PowerShell cheat sheets and demos, and lists the speaker's background and experience with PowerShell. The presentation agenda covers topics like moving around the file system, hashing, data storage, custom event logs, WinRM logging, port scanning, and persistence through profiles.
How we use Twisted in Launchpad
Although we don't use it for the core web application, most other places in Launchpad that have to deal with concurrency issues do it using Twisted. This talk will survey these areas and talk about issues we've found and design patterns we've found helpful.
Windows internals
Windows processes contain executable code and resources like memory. Processes start threads to perform tasks concurrently. Threads are lighter weight than processes and share process resources. The Windows kernel manages processes, threads, memory and hardware through system calls.
PROCESS WARP
PROCESS WARP is a distributed processing system that allows applications to run in a virtual space made up of multiple connected nodes. This allows unlimited scaling of computing resources and the ability to migrate processes between nodes seamlessly. It aims to break down the distinction between standalone and cloud applications by allowing desktop programs to utilize remote resources and move freely between offline and online usage. The system uses a special virtual machine implementation with its own CPU and memory model to achieve this distributed processing without a centralized server. It has potential benefits for increasing performance, reducing costs, and providing flexibility in application deployment.
Network troubleshooting
This document provides an overview of network troubleshooting techniques and tools. It discusses focusing on understanding basics and standard troubleshooting tools like ping first before trying more advanced methods. Documentation of network configurations, changes, and issues is emphasized. A variety of Linux command line tools are also introduced for examining network connectivity and performance issues like netstat, ifconfig, route, traceroute, and packet capture tools.
Network Stack in Userspace (NUSE)
NUSE is a library implementation of a network stack in userspace that allows new protocols and implementations to be added more quickly without modifying the kernel. It works by hijacking system calls related to networking at the library level, running the network stack code in a separate execution context using lightweight virtualization, and connecting to the network interface using options like raw sockets, DPDK, or netmap. This approach avoids the slow evolution of making kernel changes and allows network stacks and applications to be updated and deployed more flexibly on a per-application basis.
OpenStack - JobShop @Iași, 2016
This document provides an overview of OpenStack, an open-source cloud computing platform. It discusses OpenStack's components, development process using Gerrit, and integration testing. It also covers using Windows as a guest operating system in OpenStack with Hyper-V, including Windows Cloud-Init tools and supported Windows versions. Key OpenStack components that support Windows like Nova, Neutron, Cinder, and Manila are summarized.
Opening last bits of the infrastructure
Over the last three decades, the opensource movement has been pushing to open every piece of closed-source software.
Linux & BSDs successfully proved that opensource can provide state-of-the-art operating systems: Internet, clouds or large infrastructures couldn't work without OSS.
Having control over the operating system doesn't mean servers and the infrastructure are totally open, OSS won a battle but not the war.
Criteo will present its vision to break the last barriers and open the last bits of proprietary software running in modern infrastructure and the challenges that go with it.
Gentoo Linux, or Why in the World You Should Compile Everything
Gentoo Linux is a special flavor of Linux that can be automatically optimized and customized for just about any application or need. Extreme performance, configurability and a top-notch user and developer community are all hallmarks of the Gentoo experience.
As a leader of Gentoo, I will provide an overview of how it works from a developer's and a user's point of view, and why you should be running it especially if you're:
- In need of an awesome development environment;
- Interested in learning what's inside the black box of Linux;
- OCD about having a perfectly configured setup; or
- Building an embedded, minimal system or a high-performance cluster.
If there's interest, I can also talk about future developments on the horizon for Gentoo, package management in general, etc.
Flexible compute
Introducing our new OpenStack environment and image workflows as a complimentary platform to Sangers existing HPC infrastructure
Sanger, upcoming Openstack for Bio-informaticians
Delivery of a new Bio-informatics infrastructure at the Wellcome Trust Sanger Center. We include how to programatically create, manage and provide providence for images used both at Sanger and elsewhere using open source tools and continuous integration.
introduction to node.js
This document provides an introduction to Node.js, a framework for building scalable server-side applications with asynchronous JavaScript. It discusses what Node.js is, how it uses non-blocking I/O and events to avoid wasting CPU cycles, and how external Node modules help create a full JavaScript stack. Examples are given of using Node modules like Express for building RESTful APIs and Socket.IO for implementing real-time features like chat. Best practices, limitations, debugging techniques and references are also covered.
Puppet Camp Boston 2014: Keynote
This document contains slides from a presentation about Puppet, an open source configuration management tool. It discusses Puppet's architecture, components like Facter, Hiera and MCollective, and how Puppet can be used to automate infrastructure configuration and deployment. It also promotes joining the Puppet community, taking training courses, and encourages questions.
Hacker Halted 2014 - RDP Fuzzing And Why the Microsoft Open Protocol Specific...
Over the past year, Tripwire Security Researchers Tyler Reguly and Andrew Swoboda have invested numerous hours into understanding the Microsoft Remote Desktop Protocol, specifically the pre-authentication portions of RDP. The Microsoft Open Protocol Specifications were heavily utilized for this projected and, while both researchers had used the specifications before, neither had fully realized their usefulness to security researchers. This session will be a discussion of The Microsoft Open Protocol Specification with RDP as the example. The culmination of the session will be the release of a new RDP Fuzzer and a discussion around the vulnerabilities it has already discovered.
Attendees can expect to walk away with a strong understanding of the Microsoft Open Protocol Specifications and how they can leverage them to build protocol implementations and fuzzers, as well as investigate inherent flaws and discover new vulnerabilities. Attendees will have a better understanding of the pre-authentication RDP connection sequence and exactly what data is exchanged and what an attacker can deduce from this communication. Finally, attendees will gain insight into new RDP vulnerabilities.
openQA hands on with openSUSE Leap 42.1 - openSUSE.Asia Summit ID 2016
This document provides an overview of openQA and instructions for installing and configuring openQA on openSUSE Leap 42.1. It describes openQA's system architecture and workflow, and includes workshops to install openQA, configure the web UI and a worker, manage API keys, configure test settings, and run an openSUSE installation test.
Fluentd v1.0 in a nutshell
This document summarizes Fluentd v1.0 and provides details about its new features and release plan. It notes that Fluentd v1.0 will provide stable APIs and compatibility with previous versions while improving plugin APIs, adding Windows and multicore support, and increasing event time resolution to nanoseconds. The release is planned for Q3 2017 to allow feedback on v0.14 before finalizing v1.0 features.
Similar to Hogy jussunk ki lezárt hálózatokból? (20)
Deployment of WebObjects applications on CentOS Linux
Deployment of WebObjects applications on CentOS Linux
Vorontsov, golovko ssrf attacks and sockets. smorgasbord of vulnerabilities
Vorontsov, golovko ssrf attacks and sockets. smorgasbord of vulnerabilities
[HES2013] Virtually secure, analysis to remote root 0day on an industry leadi...
[HES2013] Virtually secure, analysis to remote root 0day on an industry leadi...
Powering up on PowerShell - BSides Greenville 2019
Powering up on PowerShell - BSides Greenville 2019
Gentoo Linux, or Why in the World You Should Compile Everything
Gentoo Linux, or Why in the World You Should Compile Everything
Hacker Halted 2014 - RDP Fuzzing And Why the Microsoft Open Protocol Specific...
Hacker Halted 2014 - RDP Fuzzing And Why the Microsoft Open Protocol Specific...
openQA hands on with openSUSE Leap 42.1 - openSUSE.Asia Summit ID 2016
openQA hands on with openSUSE Leap 42.1 - openSUSE.Asia Summit ID 2016
More from hackersuli
[Hackersuli] Élő szövet a fémvázon: Python és gépi tanulás a Zeek platformon
Élő szövet a fémvázon: Python és gépi tanulás a Zeek platformon
2024_hackersuli_mobil_ios_android ______
The document discusses security issues in mobile applications on iOS and Android. It provides an overview of iOS security features like sandboxing, the secure enclave, and full disk encryption. It also discusses potential risks like what data is stored in app bundles and sandboxes. For Android, it describes the more open ecosystem and risks of data storage on external storage or via backups. The document outlines threats like malware targeting banking apps and issues with permissions, exported app components, and inter-process communication.
[HUN[]Hackersuli] Hornyai Alex - Elliptikus görbék kriptográfiája
[HUN[]Hackersuli] Hornyai Alex - Elliptikus görbék kriptográfiája
[Hackersuli]Privacy on the blockchain
The document provides an overview of privacy and anonymity on blockchains. It discusses how early Bitcoin users thought it was anonymous but exchanges required real identities. It describes analysis of Bitcoin transactions and better privacy with tools like coinjoins, Tornado Cash and future ideas like stealth addresses. It summarizes criminal cases where privacy failures led to arrests and emphasizes that blockchains provide a permanent record so one should not do illegal activities or link identities to addresses.
[HUN] 2023_Hacker_Suli_Meetup_Cloud_DFIR_Alapok.pptx
Cloud DFIR techniques and tools were discussed, including terminology, shared responsibility models, identity and access management, instance metadata services, various log sources, and traffic mirroring capabilities across AWS, Azure, and GCP cloud platforms. Key points covered include the different log types available, default configurations and retention periods, and tools like SOF-ELK that can help centralize and parse cloud logs. Challenges of cloud forensics such as non-standardized terminology, lack of default log collection, and limitations of traffic mirroring were also noted.
Hackersuli Minecraft hackeles kezdoknek
This document discusses hacking in Minecraft. It provides an overview of Minecraft's history and the author's history playing the game. It then covers topics like decompiling Minecraft, running your own server, scanning for servers like LiveOverflow, connecting to LiveOverflow, using mods like Fabric and mixins, coordinate exploits from 2018, and the 2021 Log4Shell vulnerability. The document concludes by discussing X-ray mods and expressing concern that Minecraft taught players it is okay to run random JAR files from servers.
HUN Hackersuli - How to hack an airplane
This document discusses how to hack airplanes and get away with it. It provides an aviation security primer, describing security boundaries, certification requirements, and the "Swiss cheese model" of security. It also defines various aviation industry acronyms and terms. The document examines potential attack surfaces in different parts of an airplane system, including data loading interfaces. It presents a case study on portable data loaders used for updating airplane software, outlining the data loading process, attack surfaces, and potential threat scenarios involving the loader.
[Hackersuli] [HUN] Windows a szereloaknan
This document discusses using the Autoruns tool to analyze startup programs and hidden files on a Windows system. It recommends using Autoruns to save a list of startup programs, copying files to a clean system for offline analysis, and notes that the SHIM database is not detected by Autoruns. The document also covers using alternate data streams to hide files like using "echo secret > test.txt:secret.txt" and provides the Streams.exe tool for viewing these hidden files.
[HUN][Hackersuli] Szol a szoftveresen definialt radio - SDR alapok
https://www.youtube.com/watch?v=-xNzP85hRCI
[HUN] Hackersuli - Console and arcade game hacking – history, present, future
This document provides a history of console and arcade game hacking, from early consoles like the Sega Saturn and PlayStation 1 that were hacked through modchips and workarounds, to newer consoles like the PlayStation 4 and Nintendo Switch that require chaining software exploits to achieve jailbreaking. It discusses the motivation for game preservation and homebrew development. Security measures by companies like Capcom and techniques used by hackers to eventually break the protections are outlined. The current state of hacking modern consoles like the PlayStation 4 and Nintendo Switch through exploit chains is described, as well as challenges for hacking future systems.
Hackersuli - Linux game hacking with LD_PRELOAD
This document discusses using LD_PRELOAD and DYLD_INSERT_LIBRARIES to inject code into processes via shared object preloading on Linux and macOS respectively. It provides examples of modifying system calls and injecting code into applications at runtime. It also explains how to compile shared objects for injection and discusses some techniques for preventing injection, such as using setuid/setgid bits.
[HUN][hackersuli] Malware avengers
This document provides an overview of malware types, notable malware incidents, and techniques used by malware authors to evade detection. It discusses the Morris Worm in 1988, the transition of malware motives from fame to money, and exponential growth in new malware samples daily. Methods used by antivirus to detect malware and techniques used by malware to avoid detection are outlined. Cybercrime groups and interesting malware cases that were creative or exploited vulnerabilities are also summarized.
[Hackersuli][HUN]MacOS - Going Down the Rabbit Hole
This document discusses macOS privilege escalation techniques using benign App Store apps. It describes how dylib hijacking can be used to gain root privileges by subverting the installation process and dropping files in privileged locations. It provides a demonstration using a "Crontab Creator" app to drop a cronjob that executes a script with root privileges. The document also discusses monitoring tools and how Apple addressed the vulnerability in later macOS versions.
[HUN][Hackersuli] Androidos alkalmazássebészet, avagy gumikesztyűt fel és irá...
A januári hackersulin belemerülünk az androidos alkalmazások nagyon mély lelkivilágába. Könyékig fogunk túrni az androidos "assembly"-ben és megnézzük, hogy mire lehet használni a szanaszéjjel cincált byte kódot, hogy lehet mókolni vele. Hónaljig merülünk a java compiler és a dalvik rejtelmeibe és a fejünk búbja is tocsogni fog a processzorregiszterek vakargatásától. Móka és kacagás az egész családnak!
Halálcsillag, pizza, süti, üccsi, gyakorlati példák, jó fej meetupra látogató, IT biztonság iránt érdeklődő emberkék és ultrajófej előadók mind várhatóak.
Gyertek és adjátok tovább!
[HUN][Hackersuli] iOS hekkelés, avagy egyik szemünk zokog, a másik meg kacagv...
"Van publikus iBoot exploit az iOS-hez!"
Ha erre a mondatra nem vigyorogsz, gyere el és fogsz. Ha viszont zokognál, akkor arra is van okod - hogy miért, gyere el és megtudod :)
A decemberi első* Hackersuli meetupon iOS-ről fogunk beszélni mind alkalmazáshekkelési/penteszter szemszögből, mind pedig abból nézve, hogy most akkor beadhatod-e nyugodt szívvel az iPhone-odat kijelzőcserére az araboknak a Nyugatinál.
[Hackersuli][HUN] Greasemonkey, avagy fogod majd a fejed, hogy miért nem hasz...
Greasemonkey, avagy fogod majd a fejed, hogy miért nem használtad eddig
Kriptovaluták, hashbányászat és okoscicák
Zoltan Balazs provides a simplified explanation of Ethereum smart contracts for a five-year-old audience. He begins by explaining blockchain and cryptocurrencies using metaphors involving math puzzles and a fictional currency called "moneZ". He then explains how smart contracts allow digital agreements to be "carved into stone" by encoding them as code on the blockchain. Smart contracts use a programming language called Solidity and run on Ethereum's virtual machine. While promising, smart contracts also introduce new hacking risks as code vulnerabilities cannot be fixed like legal contracts. Examples of past hacks involving The DAO and a Parity wallet library vulnerability are briefly described to illustrate this risk.
More from hackersuli (20)
[Hackersuli] Élő szövet a fémvázon: Python és gépi tanulás a Zeek platformon
[Hackersuli] Élő szövet a fémvázon: Python és gépi tanulás a Zeek platformon
[HUN[]Hackersuli] Hornyai Alex - Elliptikus görbék kriptográfiája
[HUN[]Hackersuli] Hornyai Alex - Elliptikus görbék kriptográfiája
[HUN] 2023_Hacker_Suli_Meetup_Cloud_DFIR_Alapok.pptx
[HUN] 2023_Hacker_Suli_Meetup_Cloud_DFIR_Alapok.pptx
[HUN][Hackersuli] Szol a szoftveresen definialt radio - SDR alapok
[HUN][Hackersuli] Szol a szoftveresen definialt radio - SDR alapok
[HUN] Hackersuli - Console and arcade game hacking – history, present, future
[HUN] Hackersuli - Console and arcade game hacking – history, present, future
[Hackersuli][HUN]MacOS - Going Down the Rabbit Hole
[Hackersuli][HUN]MacOS - Going Down the Rabbit Hole
[HUN][Hackersuli] Androidos alkalmazássebészet, avagy gumikesztyűt fel és irá...
[HUN][Hackersuli] Androidos alkalmazássebészet, avagy gumikesztyűt fel és irá...
[HUN][Hackersuli] iOS hekkelés, avagy egyik szemünk zokog, a másik meg kacagv...
[HUN][Hackersuli] iOS hekkelés, avagy egyik szemünk zokog, a másik meg kacagv...
[Hackersuli][HUN] Greasemonkey, avagy fogod majd a fejed, hogy miért nem hasz...
[Hackersuli][HUN] Greasemonkey, avagy fogod majd a fejed, hogy miért nem hasz...
Recently uploaded
Discover the benefits of outsourcing SEO to India
"Discover the benefits of outsourcing SEO to India! From cost-effective services and expert professionals to round-the-clock work advantages, learn how your business can achieve digital success with Indian SEO solutions.
不能毕业如何获得(USYD毕业证)悉尼大学毕业证成绩单一比一原版制作
挂科购买☀【悉尼大学毕业证购买】【微信176555708】【USYD毕业证模板办理】加拿大文凭、本科、硕士、研究生学历都可以做,二、业务范围：
★、全套服务：毕业证、成绩单、化学专业毕业证书伪造【悉尼大学大学毕业证】微信176555708【USYD学位证书购买】◆◆◆◆◆ — — — 归国服务中心 — — -◆◆◆◆◆
【主营项目】
一.毕业证、成绩单、使馆认证、教育部认证、雅思托福成绩单、学生卡等！
二.真实使馆公证(即留学回国人员证明,不成功不收费)
三.真实教育部学历学位认证（教育部存档！教育部留服网站永久可查）
四.办理各国各大学文凭(一对一专业服务,可全程监控跟踪进度)
国外毕业证、学位证、成绩单办理流程：
1、客户提供办理信息：姓名、生日、专业、学位、毕业时间等（如信息不确定可以咨询顾问：【微信176555708】我们有专业老师帮你查询）；
2、开始安排制作毕业证、成绩单电子图；
3、毕业证、成绩单电子版做好以后发送给您确认；
4、毕业证、成绩单电子版您确认信息无误之后安排制作成品；
5、成品做好拍照或者视频给您确认；
6、快递给客户（国内顺丰，国外DHL、UPS等快读邮寄）。
专业服务，请勿犹豫联系我！本公司是留学创业和海归创业者们的桥梁。一次办理，终生受用，一步到位，高效服务。详情请在线咨询办理,欢迎有诚意办理的客户咨询!洽谈。
◆招聘代理：本公司诚聘英国、加拿大、澳洲、新西兰、加拿大、法国、德国、新加坡各地代理人员，如果你有业余时间，有兴趣就请联系我们咨询【微信176555708】
没文凭怎么找工作。让您回国发展信心十足！
★、真实教育部学历学位认证；（一对一专业服务，可全程监控跟踪进度）
★、真实使馆认证，可以通过大使馆查询确认；（即教育部留服认证，不成功不收费）
★、毕业证、成绩单等材料，从防伪到印刷、水印到钢印烫金，高精仿度都是跟学校原版100%相同的；（敬请放心使用）
★、可以提供钢印、水印、烫金、激光防伪、凹凸版、最新版的毕业证、百分之百让您绝对满意、
★、印刷，DHL快递毕业证、成绩单7个工作日，真实大使馆教育部认证1个月。为了达到高水准高效率。
制作原版1:1(Monash毕业证)莫纳什大学毕业证成绩单办理假
退学买莫纳什大学毕业证>【微信176555708】办理莫纳什大学毕业证成绩单【微信176555708】Monash毕业证成绩单Monash学历证书Monash文凭【Monash毕业套号文凭网认证莫纳什大学毕业证成绩单】【哪里买莫纳什大学毕业证文凭Monash成绩学校快递邮寄信封】【开版莫纳什大学文凭】Monash留信认证本科硕士学历认证1:1完美还原海外各大学毕业材料上的工艺：水印阴影底纹钢印LOGO烫金烫银LOGO烫金烫银复合重叠。文字图案浮雕激光镭射紫外荧光温感复印防伪。
可办理以下真实莫纳什大学存档留学生信息存档认证：
1莫纳什大学真实留信网认证（网上可查永久存档无风险百分百成功入库）；
2真实教育部认证（留服）等一切高仿或者真实可查认证服务（暂时不可办理）；
3购买英美真实学籍（不用正常就读直接出学历）；
4英美一年硕士保毕业证项目（保录取学校挂名不用正常就读保毕业）
留学本科/硕士毕业证书成绩单制作流程：
1客户提供办理信息：姓名生日专业学位毕业时间等（如信息不确定可以咨询顾问：我们有专业老师帮你查询莫纳什大学莫纳什大学毕业证offer）；
2开始安排制作莫纳什大学毕业证成绩单电子图；
3莫纳什大学毕业证成绩单电子版做好以后发送给您确认；
4莫纳什大学毕业证成绩单电子版您确认信息无误之后安排制作成品；
5莫纳什大学成品做好拍照或者视频给您确认；
6快递给客户（国内顺丰国外DHLUPS等快读邮寄）
— — — — — — — — — — — 《文凭顾问微信：176555708》
Ready to Unlock the Power of Blockchain!
Imagine a world where data flows freely, yet remains secure. A world where trust is built into the fabric of every transaction. This is the promise of blockchain, a revolutionary technology poised to reshape our digital landscape.
Toptal Tech is at the forefront of this innovation, connecting you with the brightest minds in blockchain development. Together, we can unlock the potential of this transformative technology, building a future of transparency, security, and endless possibilities.
办理新西兰奥克兰大学毕业证学位证书范本原版一模一样
原版一模一样【微信：741003700 】【新西兰奥克兰大学毕业证学位证书】【微信：741003700 】学位证，留信认证（真实可查，永久存档）offer、雅思、外壳等材料/诚信可靠,可直接看成品样本，帮您解决无法毕业带来的各种难题！外壳，原版制作，诚信可靠，可直接看成品样本。行业标杆！精益求精，诚心合作，真诚制作！多年品质 ,按需精细制作，24小时接单,全套进口原装设备。十五年致力于帮助留学生解决难题，包您满意。
本公司拥有海外各大学样板无数，能完美还原海外各大学 Bachelor Diploma degree, Master Degree Diploma
1:1完美还原海外各大学毕业材料上的工艺：水印，阴影底纹，钢印LOGO烫金烫银，LOGO烫金烫银复合重叠。文字图案浮雕、激光镭射、紫外荧光、温感、复印防伪等防伪工艺。材料咨询办理、认证咨询办理请加学历顾问Q/微741003700
留信网认证的作用:
1:该专业认证可证明留学生真实身份
2:同时对留学生所学专业登记给予评定
3:国家专业人才认证中心颁发入库证书
4:这个认证书并且可以归档倒地方
5:凡事获得留信网入网的信息将会逐步更新到个人身份内，将在公安局网内查询个人身份证信息后，同步读取人才网入库信息
6:个人职称评审加20分
7:个人信誉贷款加10分
8:在国家人才网主办的国家网络招聘大会中纳入资料，供国家高端企业选择人才
学位认证网(DU毕业证)迪肯大学毕业证成绩单一比一原版制作
24小时办理【微信176555708】【毕业证明信-推荐信做学费单】成绩单，录取通知书，Offer，在读证明，雅思托福成绩单，真实大使馆教育部认证，回国人员证明，留信网认证。网上存档永久可查！
degree，Transcripts（一对一服务包括毕业院长签字,专业课程,学位类型,专业或教育领域,以及毕业日期.不要忽视这些细节.这两份文件同样重要!毕业证成绩单文凭留信网学历认证！）如果您是以下情况，我们都能竭诚为您解决实际问题：【公司采用定金+余款的付款流程，以最大化保障您的利益，让您放心无忧】
1、在校期间，因各种原因未能顺利毕业，拿不到官方迪肯大学毕业证+微信176555708；
2、面对父母的压力，希望尽快拿到；
3、不清楚流程以及材料该如何准备；
4、回国时间很长，忘记办理毕业证丢失 学历认证《迪肯大学毕业证》微信176555708《DU学位证书购买》
学位证书验证；
5、回国马上就要找工作，办给用人单位看；
6、企事业单位必须要求办理学历证书 英文《迪肯大学毕业证》微信176555708《DU学位证书购买》
本科毕业证书扫描件的；
微信176555708面向迪肯大学毕业留学生提供以下服务:
【★迪肯大学毕业证、成绩单等全套材料，从防伪到印刷，从水印到钢印烫金，与学校100%相同】
【★大学学历 硕士学位《迪肯大学毕业证》微信176555708《DU学位证书购买》
硕士毕业证】
【★毕业证书范本】
【★真实留信认证，留信网入库存档，可查】
主营项目：
a.办理海外毕业证认证《迪肯大学毕业证》微信176555708《DU学位证书购买》
学位证书英文版，改成绩单，Offer、在读证明、学生卡、信封、证明信等全套材料，从防伪到印刷，从水印到钢印烫金，高精仿度跟学校原版100%相同.
b.真实使馆认证（即留学人员回国证明），使馆存档可通过大使馆查询确认.
c.真实教育部国外学历学位认证，教育部存档，教育部留服网站100%可查.
d.留信网认证，国家专业人才认证中心颁发入库证书，留信网存档可查.
e.招聘中介代理：本公司诚聘各地代理人员以及留学生，如果你有业余时间，有兴趣就请联系我们，我们会给到您的回报！期待您的加盟：一朝办理，终身受益（本信息长期有效）互惠互利，为广大海内外学子及有需要的人士在事业上跨过这道门槛！
【业务选择办理准则】
1.如果您只是为了的应付父母亲戚朋友看下迪肯大学毕业证，那么办理一份学位即可
2.如果您是为了回国找工作，只是进私营企业或者外企，那么办理一份多大学历认证有时间限制吗《迪肯大学毕业证》微信176555708《DU学位证书购买》
毕业证丢失补办即可，因为私营企业或者外企是不能查询学位真假的！
3.如果您是要进国企银行事业单位考公务员等就需办理真实学历认证！
诚招代理：本公司诚聘当地合作代理人员，如果你有业余时间，有兴趣就请联系我们。
可查真实(Monash毕业证)西澳大学毕业证成绩单退学买
办理假西澳大学毕业证【微信176555708】购买,办理Monash成绩单,Monash毕业证制作【微信176555708】【西澳大学毕业证】，Monash毕业证购买，Monash学位证，西澳大学学位证【Monash成绩单制作】【Monash毕业证文凭 Monash本科 澳洲学历认证原版制作【diploma certificate degree transcript 】【留信网认证，本科，硕士，海归，博士，排名，成绩单】代办国外（海外）澳洲、韩国、加拿大、新西兰等各大学毕业证。 ?我们对海外大学及学院的毕业证成绩单所使用的材料，尺寸大小，防伪结构（包括：水印，阴影底纹，钢印LOGO烫金烫银，LOGO烫金烫银复合重叠。 文字图案浮雕，激光镭射，紫外荧光，温感，复印防伪）都有原版本文凭对照。#一整套西澳大学文凭证件办理#—包含西澳大学西澳大学毕业证成绩单学历认证|使馆认证|归国人员证明|教育部认证|留信网认证永远存档教育部学历学位认证查询办理国外文凭国外学历学位认证#我们提供全套办理服务。
一整套留学文凭证件服务：
一：西澳大学西澳大学毕业证成绩单毕业证 #成绩单等全套材料从防伪到印刷水印底纹到钢印烫金
二：真实使馆认证（留学人员回国证明）使馆存档
三：真实教育部认证教育部存档教育部留服网站永久可查
四：留信认证留学生信息网站永久可查
国外毕业证学位证成绩单办理方法：
1客户提供办理西澳大学西澳大学毕业证成绩单信息：姓名生日专业学位毕业时间等（如信息不确定可以咨询顾问：我们有专业老师帮你查询）；
2开始安排制作毕业证成绩单电子图；
3毕业证成绩单电子版做好以后发送给您确认；
4毕业证成绩单电子版您确认信息无误之后安排制作成品；
5成品做好拍照或者视频给您确认；
6快递给客户（国内顺丰国外DHLUPS等快读邮寄）。
教育部文凭学历认证认证的用途：
如果您计划在国内发展那么办理国内教育部认证是必不可少的。事业性用人单位如银行国企公务员在您应聘时都会需要您提供这个认证。其他私营 #外企企业无需提供！办理教育部认证所需资料众多且烦琐所有材料您都必须提供原件我们凭借丰富的经验帮您快速整合材料让您少走弯路。
实体公司专业为您服务如有需要请联系我: 微信176555708
办理毕业证(UPenn毕业证)宾夕法尼亚大学毕业证成绩单快速办理
官方原版办理宾夕法尼亚大学毕业证【微信176555708】学历认证怎么做：原版仿制宾夕法尼亚大学电子版成绩单毕业证认证【宾夕法尼亚大学毕业证成绩单】、宾夕法尼亚大学文凭证书成绩单复刻offer录取通知书、购买UPenn圣力嘉学院本科毕业证、【宾夕法尼亚大学毕业证办理UPenn毕业证书哪里买】、宾夕法尼亚大学 Offer在线办理UPenn Offer宾夕法尼亚大学Bachloer Degree。（留信学历认证永久存档查询）采用学校原版纸张、特殊工艺完全按照原版一比一制作（包括：隐形水印，阴影底纹，钢印LOGO烫金烫银，LOGO烫金烫银复合重叠，文字图案浮雕，激光镭射，紫外荧光，温感，复印防伪）行业标杆！精益求精，诚心合作，真诚制作！多年品质 ,按需精细制作，24小时接单,全套进口原装设备，十五年致力于帮助留学生解决难题，业务范围有加拿大、英国、澳洲、韩国、美国、新加坡，新西兰等学历材料，包您满意。
◆◆◆◆◆ — — — — — — — — 【留学教育】留学归国服务中心 — — — — — -◆◆◆◆◆
【主营项目】
一.毕业证【微信：176555708】成绩单、使馆认证、教育部认证、雅思托福成绩单、学生卡等！
二.真实使馆公证(即留学回国人员证明,不成功不收费)
三.真实教育部学历学位认证（教育部存档！教育部留服网站永久可查）
四.办理各国各大学文凭(一对一专业服务,可全程监控跟踪进度)
如果您处于以下几种情况：
◇在校期间，因各种原因未能顺利毕业……拿不到官方毕业证【微信：176555708】
◇面对父母的压力，希望尽快拿到；
◇不清楚认证流程以及材料该如何准备；
◇回国时间很长，忘记办理；
◇回国马上就要找工作，办给用人单位看；
◇企事业单位必须要求办理的
◇需要报考公务员、购买免税车、落转户口
◇申请留学生创业基金
留信网认证的作用:
1:该专业认证可证明留学生真实身份
2:同时对留学生所学专业登记给予评定
3:国家专业人才认证中心颁发入库证书
4:这个认证书并且可以归档倒地方
5:凡事获得留信网入网的信息将会逐步更新到个人身份内，将在公安局网内查询个人身份证信息后，同步读取人才网入库信息
6:个人职称评审加20分
7:个人信誉贷款加10分→ 【关于价格问题（保证一手价格）
8:在国家人才网主办的国家网络招聘大会中纳入资料，供国家高端企业选择人才
选择实体注册公司办理，更放心，更安全！我们的承诺：可来公司面谈，可签订合同，会陪同客户一起到教育部认证窗口递交认证材料，客户在教育部官方认证查询网站查询到认证通过结果后付款，不成功不收费！
我们所定的价格是非常合理的，而且我们现在做得单子大多数都是代理和回头客户介绍的所以一般现在有新的单子 我给客户的都是第一手的代理价格，因为我想坦诚对待大家 不想跟大家在价格方面浪费时间
对于老客户或者被老客户介绍过来的朋友，我们都会适当给一些优惠。
学历顾问：微信：176555708
Explore-Insanony: Watch Instagram Stories Secretly
Instagram has become one of the most popular social media platforms, allowing people to share photos, videos, and stories with their followers. Sometimes, though, you might want to view someone's story without them knowing.
假文凭国外(Adelaide毕业证)澳大利亚国立大学毕业证成绩单办理
购买澳大利亚国立大学毕业证>【微信176555708】办理澳大利亚国立大学毕业证成绩单【微信176555708】Adelaide毕业证成绩单Adelaide学历证书Adelaide文凭【Adelaide毕业套号文凭网认证澳大利亚国立大学毕业证成绩单】【哪里买澳大利亚国立大学毕业证文凭Adelaide成绩学校快递邮寄信封】【开版澳大利亚国立大学文凭】Adelaide留信认证本科硕士学历认证(诚招代理)微信：176555708办理国外高校毕业证成绩单文凭学位证,真实使馆公证（留学回国人员证明）真实留信网认证国外学历学位认证雅思代考国外学校代申请名校保录开请假条改GPA改成绩ID卡
1.高仿业务:【本科硕士】毕业证,成绩单（GPA修改）,学历认证（教育部认证）,大学Offer,,ID,留信认证,使馆认证,雅思,语言证书等高仿类证书；
2.认证服务: 学历认证（教育部认证）,大使馆认证（回国人员证明）,留信认证（可查有编号证书）,大学保录取,雅思保分成绩单。
3.技术服务：钢印水印烫金激光防伪凹凸版设计印刷激凸温感光标底纹镭射速度快。
办理澳大利亚国立大学澳大利亚国立大学毕业证成绩单流程：
1客户提供办理信息：姓名生日专业学位毕业时间等（如信息不确定可以咨询顾问：我们有专业老师帮你查询）；
2开始安排制作毕业证成绩单电子图；
3毕业证成绩单电子版做好以后发送给您确认；
4毕业证成绩单电子版您确认信息无误之后安排制作成品；
5成品做好拍照或者视频给您确认；
6快递给客户（国内顺丰国外DHLUPS等快读邮寄）
-办理真实使馆公证（即留学回国人员证明）
-办理各国各大学文凭（世界名校一对一专业服务,可全程监控跟踪进度）
-全套服务：毕业证成绩单真实使馆公证真实教育部认证。让您回国发展信心十足！
（详情请加一下 文凭顾问+微信:176555708）欢迎咨询！
留学挂科(UofM毕业证)明尼苏达大学毕业证成绩单复刻办理
精仿办理明尼苏达大学学历证书＜176555708微信＞【毕业证明信-推荐信做学费单＞【微信176555708】【制作UofM毕业证文凭认证明尼苏达大学毕业证成绩单购买】【UofM毕业证书】{明尼苏达大学文凭购买}】成绩单，录取通知书，Offer，在读证明，雅思托福成绩单，真实大使馆教育部认证，回国人员证明，＞【制作UofM毕业证文凭认证明尼苏达大学毕业证成绩单购买】【UofM毕业证书】{明尼苏达大学文凭购买}留信网认证。
明尼苏达大学学历证书＜微信176555708（一对一服务包括毕业院长签字,专业课程,学位类型,专业或教育领域,以及毕业日期.不要忽视这些细节.这两份文件同样重要!毕业证成绩单文凭留信网学历认证！）（留信学历认证永久存档查询）采用学校原版纸张、特殊工艺完全按照原版一比一制作（包括：隐形水印，阴影底纹，钢印LOGO烫金烫银，LOGO烫金烫银复合重叠，文字图案浮雕，激光镭射，紫外荧光，温感，复印防伪）行业标杆！精益求精，诚心合作，真诚制作！多年品质 ,按需精细制作，24小时接单,全套进口原装设备，十五年致力于帮助留学生解决难题，业务范围有加拿大、英国、澳洲、韩国、美国、新加坡，新西兰等学历材料，包您满意。
◆◆◆◆◆ — — — — — — — — 【留学教育】留学归国服务中心 — — — — — -◆◆◆◆◆
【主营项目】
一.毕业证【微信：176555708】成绩单、使馆认证、教育部认证、雅思托福成绩单、学生卡等！
二.真实使馆公证(即留学回国人员证明,不成功不收费)
三.真实教育部学历学位认证（教育部存档！教育部留服网站永久可查）
四.办理各国各大学文凭(一对一专业服务,可全程监控跟踪进度)
如果您处于以下几种情况：
◇在校期间，因各种原因未能顺利毕业……拿不到官方毕业证【微信：176555708】
◇面对父母的压力，希望尽快拿到；
◇不清楚认证流程以及材料该如何准备；
◇回国时间很长，忘记办理；
◇回国马上就要找工作，办给用人单位看；
◇企事业单位必须要求办理的
◇需要报考公务员、购买免税车、落转户口
◇申请留学生创业基金
留信网认证的作用:
1:该专业认证可证明留学生真实身份
2:同时对留学生所学专业登记给予评定
3:国家专业人才认证中心颁发入库证书
4:这个认证书并且可以归档倒地方
5:凡事获得留信网入网的信息将会逐步更新到个人身份内，将在公安局网内查询个人身份证信息后，同步读取人才网入库信息
6:个人职称评审加20分
7:个人信誉贷款加10分→ 【关于价格问题（保证一手价格）
8:在国家人才网主办的国家网络招聘大会中纳入资料，供国家高端企业选择人才
选择实体注册公司办理，更放心，更安全！我们的承诺：可来公司面谈，可签订合同，会陪同客户一起到教育部认证窗口递交认证材料，客户在教育部官方认证查询网站查询到认证通过结果后付款，不成功不收费！
我们所定的价格是非常合理的，而且我们现在做得单子大多数都是代理和回头客户介绍的所以一般现在有新的单子 我给客户的都是第一手的代理价格，因为我想坦诚对待大家 不想跟大家在价格方面浪费时间
对于老客户或者被老客户介绍过来的朋友，我们都会适当给一些优惠。
学历顾问：微信：176555708
成绩单ps(UST毕业证)圣托马斯大学毕业证成绩单快速办理
一比一原版制作UST毕业证【微信176555708】圣托马斯大学毕业证书原版↑制作圣托马斯大学学历认证文凭办理圣托马斯大学留信网认证,留学回国办理毕业证成绩单文凭学历认证【微信176555708】专业为海外学子办理毕业证成绩单、文凭制作，学历仿制，回国人员证明、做文凭，研究生、本科、硕士学历认证、留信认证、结业证、学位证书样本、美国教育部认证百分百真实存档可查】（留信学历认证永久存档查询）采用学校原版纸张、特殊工艺完全按照原版一比一制作（包括：隐形水印，阴影底纹，钢印LOGO烫金烫银，LOGO烫金烫银复合重叠，文字图案浮雕，激光镭射，紫外荧光，温感，复印防伪）行业标杆！精益求精，诚心合作，真诚制作！多年品质 ,按需精细制作，24小时接单,全套进口原装设备，十五年致力于帮助留学生解决难题，业务范围有加拿大、英国、澳洲、韩国、美国、新加坡，新西兰等学历材料，包您满意。
◆◆◆◆◆ — — — — — — — — 【留学教育】留学归国服务中心 — — — — — -◆◆◆◆◆
【主营项目】
一.毕业证【微信：176555708】成绩单、使馆认证、教育部认证、雅思托福成绩单、学生卡等！
二.真实使馆公证(即留学回国人员证明,不成功不收费)
三.真实教育部学历学位认证（教育部存档！教育部留服网站永久可查）
四.办理各国各大学文凭(一对一专业服务,可全程监控跟踪进度)
如果您处于以下几种情况：
◇在校期间，因各种原因未能顺利毕业……拿不到官方毕业证【微信：176555708】
◇面对父母的压力，希望尽快拿到；
◇不清楚认证流程以及材料该如何准备；
◇回国时间很长，忘记办理；
◇回国马上就要找工作，办给用人单位看；
◇企事业单位必须要求办理的
◇需要报考公务员、购买免税车、落转户口
◇申请留学生创业基金
留信网认证的作用:
1:该专业认证可证明留学生真实身份
2:同时对留学生所学专业登记给予评定
3:国家专业人才认证中心颁发入库证书
4:这个认证书并且可以归档倒地方
5:凡事获得留信网入网的信息将会逐步更新到个人身份内，将在公安局网内查询个人身份证信息后，同步读取人才网入库信息
6:个人职称评审加20分
7:个人信誉贷款加10分→ 【关于价格问题（保证一手价格）
8:在国家人才网主办的国家网络招聘大会中纳入资料，供国家高端企业选择人才
选择实体注册公司办理，更放心，更安全！我们的承诺：可来公司面谈，可签订合同，会陪同客户一起到教育部认证窗口递交认证材料，客户在教育部官方认证查询网站查询到认证通过结果后付款，不成功不收费！
我们所定的价格是非常合理的，而且我们现在做得单子大多数都是代理和回头客户介绍的所以一般现在有新的单子 我给客户的都是第一手的代理价格，因为我想坦诚对待大家 不想跟大家在价格方面浪费时间
对于老客户或者被老客户介绍过来的朋友，我们都会适当给一些优惠。
学历顾问：微信：176555708
Understanding User Behavior with Google Analytics.pdf
Unlocking the full potential of Google Analytics is crucial for understanding and optimizing your website’s performance. This guide dives deep into the essential aspects of Google Analytics, from analyzing traffic sources to understanding user demographics and tracking user engagement.
Traffic Sources Analysis:
Discover where your website traffic originates. By examining the Acquisition section, you can identify whether visitors come from organic search, paid campaigns, direct visits, social media, or referral links. This knowledge helps in refining marketing strategies and optimizing resource allocation.
User Demographics Insights:
Gain a comprehensive view of your audience by exploring demographic data in the Audience section. Understand age, gender, and interests to tailor your marketing strategies effectively. Leverage this information to create personalized content and improve user engagement and conversion rates.
Tracking User Engagement:
Learn how to measure user interaction with your site through key metrics like bounce rate, average session duration, and pages per session. Enhance user experience by analyzing engagement metrics and implementing strategies to keep visitors engaged.
Conversion Rate Optimization:
Understand the importance of conversion rates and how to track them using Google Analytics. Set up Goals, analyze conversion funnels, segment your audience, and employ A/B testing to optimize your website for higher conversions. Utilize ecommerce tracking and multi-channel funnels for a detailed view of your sales performance and marketing channel contributions.
Custom Reports and Dashboards:
Create custom reports and dashboards to visualize and interpret data relevant to your business goals. Use advanced filters, segments, and visualization options to gain deeper insights. Incorporate custom dimensions and metrics for tailored data analysis. Integrate external data sources to enrich your analytics and make well-informed decisions.
This guide is designed to help you harness the power of Google Analytics for making data-driven decisions that enhance website performance and achieve your digital marketing objectives. Whether you are looking to improve SEO, refine your social media strategy, or boost conversion rates, understanding and utilizing Google Analytics is essential for your success.
制作毕业证书(ANU毕业证)莫纳什大学毕业证成绩单官方原版办理
在线办理莫纳什大学毕业证【微信：176555708】(ANU毕业证书)成绩单学位证【微信：176555708】，留信认证（真实可查，永久存档）纸张工艺/offer、雅思、外壳等材料/诚信可靠,可直接看成品样本，帮您解决无法毕业带来的各种难题！外壳，原版制作，诚信可靠，可直接看成品样本。行业标杆！精益求精，诚心合作，真诚制作！多年品质 ,按需精细制作，24小时接单,全套进口原装设备。十五年致力于帮助留学生解决难题，包您满意。#一整套莫纳什大学文凭证件办理#—包含莫纳什大学莫纳什大学毕业证文凭证书学历认证|使馆认证|归国人员证明|教育部认证|留信网认证永远存档教育部学历学位认证查询办理国外文凭国外学历学位认证#我们提供全套办理服务。
一整套留学文凭证件服务：
一：莫纳什大学莫纳什大学毕业证文凭证书毕业证 #成绩单等全套材料从防伪到印刷水印底纹到钢印烫金
二：真实使馆认证（留学人员回国证明）使馆存档
三：真实教育部认证教育部存档教育部留服网站永久可查
四：留信认证留学生信息网站永久可查
国外毕业证学位证成绩单办理方法：
1客户提供办理莫纳什大学莫纳什大学毕业证文凭证书信息：姓名生日专业学位毕业时间等（如信息不确定可以咨询顾问：我们有专业老师帮你查询）；
2开始安排制作毕业证成绩单电子图；
3毕业证成绩单电子版做好以后发送给您确认；
4毕业证成绩单电子版您确认信息无误之后安排制作成品；
5成品做好拍照或者视频给您确认；
6快递给客户（国内顺丰国外DHLUPS等快读邮寄）。
教育部文凭学历认证认证的用途：
如果您计划在国内发展那么办理国内教育部认证是必不可少的。事业性用人单位如银行国企公务员在您应聘时都会需要您提供这个认证。其他私营 #外企企业无需提供！办理教育部认证所需资料众多且烦琐所有材料您都必须提供原件我们凭借丰富的经验帮您快速整合材料让您少走弯路。
实体公司专业为您服务如有需要请联系我: 微信176555708
留学学历(UoA毕业证)奥克兰大学毕业证成绩单官方原版办理
制做办理奥克兰大学学历证书＜176555708微信＞【毕业证明信-推荐信做学费单＞【微信176555708】【制作UoA毕业证文凭认证奥克兰大学毕业证成绩单购买】【UoA毕业证书】{奥克兰大学文凭购买}】成绩单，录取通知书，Offer，在读证明，雅思托福成绩单，真实大使馆教育部认证，回国人员证明，＞【制作UoA毕业证文凭认证奥克兰大学毕业证成绩单购买】【UoA毕业证书】{奥克兰大学文凭购买}留信网认证。
奥克兰大学学历证书＜微信176555708（一对一服务包括毕业院长签字,专业课程,学位类型,专业或教育领域,以及毕业日期.不要忽视这些细节.这两份文件同样重要!毕业证成绩单文凭留信网学历认证！）[留学文凭学历认证(留信认证使馆认证)奥克兰大学毕业证成绩单毕业证证书大学Offer请假条成绩单语言证书国际回国人员证明高仿教育部认证申请学校等一切高仿或者真实可查认证服务。
多年留学服务公司,拥有海外样板无数能完美1:1还原海外各国大学degreeDiplomaTranscripts等毕业材料。海外大学毕业材料都有哪些工艺呢？工艺难度主要由：烫金.钢印.底纹.水印.防伪光标.热敏防伪等等组成。而且我们每天都在更新海外文凭的样板以求所有同学都能享受到完美的品质服务。
国外毕业证学位证成绩单办理方法：
1客户提供办理奥克兰大学奥克兰大学硕士毕业证成绩单信息：姓名生日专业学位毕业时间等（如信息不确定可以咨询顾问：我们有专业老师帮你查询）；
2开始安排制作毕业证成绩单电子图；
3毕业证成绩单电子版做好以后发送给您确认；
4毕业证成绩单电子版您确认信息无误之后安排制作成品；
5成品做好拍照或者视频给您确认；
6快递给客户（国内顺丰国外DHLUPS等快读邮寄）
— — — — 我们是挂科和未毕业同学们的福音我们是实体公司精益求精的工艺！ — — — -
一真实留信认证的作用(私企外企荣誉的见证):
1：该专业认证可证明留学生真实留学身份同时对留学生所学专业等级给予评定。
2：国家专业人才认证中心颁发入库证书这个入网证书并且可以归档到地方。
3：凡是获得留信网入网的信息将会逐步更新到个人身份内将在公安部网内查询个人身份证信息后同步读取人才网入库信息。
4：个人职称评审加20分个人信誉贷款加10分。
5：在国家人才网主办的全国网络招聘大会中纳入资料供国家500强等高端企业选择人才。
办理毕业证(NYU毕业证)纽约大学毕业证成绩单官方原版办理
退学买【纽约大学毕业证认证】【办证微信176555708】【纽约大学文凭毕业证制作】【NYU学历学位证书哪里买】办理纽约大学学位证书扫描件、办理纽约大学雅思证书！
国际留学归国服务中心【如何办纽约大学毕业证认证】【NYU学位证书扫描件哪里买】实体公司，注册经营，行业标杆，精益求精！（留信学历认证永久存档查询）采用学校原版纸张、特殊工艺完全按照原版一比一制作（包括：隐形水印，阴影底纹，钢印LOGO烫金烫银，LOGO烫金烫银复合重叠，文字图案浮雕，激光镭射，紫外荧光，温感，复印防伪）行业标杆！精益求精，诚心合作，真诚制作！多年品质 ,按需精细制作，24小时接单,全套进口原装设备，十五年致力于帮助留学生解决难题，业务范围有加拿大、英国、澳洲、韩国、美国、新加坡，新西兰等学历材料，包您满意。
◆◆◆◆◆ — — — — — — — — 【留学教育】留学归国服务中心 — — — — — -◆◆◆◆◆
【主营项目】
一.毕业证【微信：176555708】成绩单、使馆认证、教育部认证、雅思托福成绩单、学生卡等！
二.真实使馆公证(即留学回国人员证明,不成功不收费)
三.真实教育部学历学位认证（教育部存档！教育部留服网站永久可查）
四.办理各国各大学文凭(一对一专业服务,可全程监控跟踪进度)
如果您处于以下几种情况：
◇在校期间，因各种原因未能顺利毕业……拿不到官方毕业证【微信：176555708】
◇面对父母的压力，希望尽快拿到；
◇不清楚认证流程以及材料该如何准备；
◇回国时间很长，忘记办理；
◇回国马上就要找工作，办给用人单位看；
◇企事业单位必须要求办理的
◇需要报考公务员、购买免税车、落转户口
◇申请留学生创业基金
留信网认证的作用:
1:该专业认证可证明留学生真实身份
2:同时对留学生所学专业登记给予评定
3:国家专业人才认证中心颁发入库证书
4:这个认证书并且可以归档倒地方
5:凡事获得留信网入网的信息将会逐步更新到个人身份内，将在公安局网内查询个人身份证信息后，同步读取人才网入库信息
6:个人职称评审加20分
7:个人信誉贷款加10分→ 【关于价格问题（保证一手价格）
8:在国家人才网主办的国家网络招聘大会中纳入资料，供国家高端企业选择人才
选择实体注册公司办理，更放心，更安全！我们的承诺：可来公司面谈，可签订合同，会陪同客户一起到教育部认证窗口递交认证材料，客户在教育部官方认证查询网站查询到认证通过结果后付款，不成功不收费！
我们所定的价格是非常合理的，而且我们现在做得单子大多数都是代理和回头客户介绍的所以一般现在有新的单子 我给客户的都是第一手的代理价格，因为我想坦诚对待大家 不想跟大家在价格方面浪费时间
对于老客户或者被老客户介绍过来的朋友，我们都会适当给一些优惠。
学历顾问：微信：176555708
Recently uploaded (20)
Explore-Insanony: Watch Instagram Stories Secretly
Explore-Insanony: Watch Instagram Stories Secretly
Understanding User Behavior with Google Analytics.pdf
Understanding User Behavior with Google Analytics.pdf
Hogy jussunk ki lezárt hálózatokból?
- 1. XFLTReaT: Hogy jussunk ki lezárt hálózatokból? Balázs Bucsay / @xoreipeip Senior Security Consultant @ NCC Group
- 2. Workshop • Needed: • VMware OR VirtualBox • Windows Vista SP1 or later installed • Virtual Machine distributed • 5-6Gb free space • Windows and Linux BASIC skills • Grab it: • USB sticks • http://192.168.121.1/
- 3. Bio / Balázs Bucsay • Senior Security Consultant @ NCC Group • Strictly technical certificates: OSCE, OSCP, OSWP, GIAC GPEN, CREST CCT Inf • Former Research Director @ MRG Effitas • Twitter: @xoreipeip • Linkedin: https://www.linkedin.com/in/bucsayb
- 4. Presentations • Talks around the world: • North America: Hacker Halted, Shakacon • Australia: RuxCon • Asia: Hack in the Box GSEC • Europe: • DeepSec / Vienna (AT) • BruCON / Ghent (BE) • PHDays / Moscow (RU) • HackCon / Oslo (NO) • Hacktivity / Budapest (HU) • Inf. Gov. & eDisc. Summit / London (UK) @xoreipeip
- 5. DISCLAIMER
- 6. MAC Address Change • MAC => Media Access Control • Every modern network device has a MAC address • It can be changed • When/why to change? • Free limited sessions (20 min) • Steal other ppl session • Don’t be a jerk! • MAC collision would make both of you miserable
- 7. Alternative gateways • Gateways/routers are routing the traffic • Very rare • Maybe there is another gateway on the network • Change router to the unfiltered one
- 8. Misconfigured proxies • Check if the proxy allows: • to connect to external sites • GET http://external.host HTTP/1.0 • to make a connection to HTTP ports (tcp/80; 8080; 8443…) • HTTP CONNECT • to connect specific ports (tcp/21; 25) • Broken HTTP or byte streams • One of the mobile operators was an example
- 9. Misconfigured firewalls • ICMP is allowed (ping) • UDP on 53 allowed (DNS) • TCP on 21/80/443/465/587 Not really misconfiguration but: • Protocol specific traffic is allowed: • DNS is allowed • HTTP • etc.
- 10. Tunnels
- 13. Tunnelling theory 101 / MTU @xoreipeip
- 14. What is XFLTReaT? XFLTReaT (say exfil-treat or exfiltrate) • Tunnelling framework • Open-source • Python based • OOP • Modular • Multi client • Plug and Play (at least as easy as it can be) • Check functionality • STILL NOT PRODUCTION GRADE @xoreipeip
- 15. Check functionality • Easy way to figure out, which protocol is not filtered on the network • Automated approach: No deep knowledge is needed • Client sends a challenge over the selected (or all) modules to the server • If the server responses with the solution: • We know that the server is up and running • The specific module/protocol is working over the network • Connection can be made @xoreipeip
- 16. Multi Operating System Support @xoreipeip Linux MacOS(X) Windows FreeBSD OpenBSD NetBSD TCP Generic Supported Supported Supported N/A N/A N/A UDP Generic Supported Supported N/A N/A N/A N/A ICMP Supported Supported N/A N/A N/A N/A SOCKS Supported Supported Supported N/A N/A N/A HTTP CONNECT Supported Supported Supported N/A N/A N/A DNS PoC N/A N/A N/A N/A N/A SCTP Supported N/A N/A N/A N/A N/A WebSocket Supported Supported N/A N/A N/A N/A RDP N/A N/A Supported N/A N/A N/A
- 18. WORKSHOP 1
- 19. Install • Ubuntu VM • Network should be NAT’d (Share with my Windows/Mac) • Default user: user ; password: user • # sudo bash • # dhclient ens33 OR dhclient enp0s3 • # ping 8.8.8.8 • # cd /home/user/xfltreat/ • Use text editor to open xfltreat.conf • CHANGE YOUR CLIENT PRIVATE IP ADDRESS (clientip = 10.9.0.XXX) • Enable modules: TCP, UDP, ICMP @xoreipeip
- 20. Check + Client mode • python2.7 xfltreat.py --check • Open browser • http://www.whatismyipaddress.com • Change config, enable ONLY ONE module that worked • python2.7 xfltreat.py --client --verbose=2 • Check your IP again in the browser • Repeat with a different module @xoreipeip
- 21. Dynamic Virtual Channels • Introduced in Window Server 2008 & Windows Vista SP1 • Bi-directional channels can be created in the active RDP session • How it works: • DLL plugin have to be loaded in the mstsc.exe process’ context • When initialized it creates a listener with the channel name • Magic happens only when the server connects to channel explicitly • This is how Copy&Paste, Remote drives, remote hardware are working thru RDP • Plugin could be implemented for Unices (FreeRDP) @xoreipeip
- 22. Universal Dynamic Virtual Channel Connector • https://github.com/earthquake/UniversalDVC/ • Two parts: • .DLL that needs to be registered on the client (mstsc.exe) • .REG file if other user is used than the Administrator • .EXE that can be used on the server • Three modes for both sides: • listen() • connect() • Named Pipe @xoreipeip
- 23. Universal DVC Connector example use cases/1 @xoreipeip
- 24. Universal DVC Connector example use cases/2 @xoreipeip
- 25. Universal DVC Connector example use cases/3 @xoreipeip
- 26. Elevator pitch • Have you ever struggled testing over a Windows Jump box? • Have you been asked to provide a list of tools that you need for testing? • Have you spent a day or half a day installing your tools and still forgot something to get approved? @xoreipeip
- 27. RDP module • Windows only + Server mode only • Disappointing bit that all stuff needs to be configured/installed • 8 Mbps with the module itself • 18 Mbps with UDVC + TCP Generic module • Win32 API calls from Python is not a good idea • Threading could help, maybe calling functions directly too • NAT’d – because it is TUN and not TAP @xoreipeip
- 28. WORKSHOP 2
- 29. Install • Windows • Are you using Vista SP1 or newer? • Are you using 32bit or 64bit Windows? • Install vc_redist.x86 / x64.exe • Unzip the right zip file • Open a cmd/powershell with Administrator rights • regsvr32.exe /u UDVC-Plugin[x86 | x64].dll @xoreipeip
- 30. Install • Windows • Is your user not an Administrator? • Double click on UDVC-Plugin.reg (from Github) • Start regedit.exe and go to: HKEY_CURRENT_USERSOFTWAREMicrosoftTerminal Server ClientDefaultAddInsUDVC-Plugin • Change ip to 0.0.0.0 @xoreipeip
- 31. Config UDVC + connect RDP • enabled -> 1 • mode -> 0 • ip -> 0.0.0.0 • port -> 31337 • Start mstsc.exe (Remote Desktop Client) • Connect: 18.184.9.137 • User: xfl[your number] • Password: HekkerSuli18 @xoreipeip
- 32. Start XFLTReaT • Server side: • C:xfltreat • python xfltreat.py --server • Client side • edit xfltreat.py • Set the IP of the RDP Client (RDP Client IP!) • Enable only TCP Generic module • Modify port to 31337 • python xfltreat.py --client @xoreipeip
- 33. Find the secret service • Target: 172.31.34.175 • Command: nmap -vvv -n 172.31.34.175 • What does it say? Netcat it! @xoreipeip
- 34. Offense • Bypass basic obstacles • Specific ports are unfiltered (TCP / UDP) • DNS allowed • ICMP allowed • Bypass not that basic obstacles • Specific protocol allowed (IPS or any other active device in place) • Special authentication required • Test over jump boxes – segregated networks • Exfiltrate information from internal networks • Get unfiltered internet access @xoreipeip
- 36. TODO + Help me! @xoreipeip • What to do next? • Commenting • Bug fixes • Authentication + encryption modules • New modules • How can you help? • Help develop stuff (use next-version branch) • Follow me on twitter, retweet XFLTReaT related tweets
- 37. Q&A - Thank you for your attention Balazs Bucsay / @xoreipeip
- 38. Office Locations Europe Manchester - Head Office Amsterdam Basingstoke Cambridge Copenhagen Cheltenham Delft Edinburgh Glasgow The Hague Leatherhead Leeds London Madrid Malmö Milton Keynes Munich Vilnius Zurich North America Atlanta, GA Austin, TX Boston, MA Campbell, CA Chicago, IL Kitchener, ON New York, NY San Francisco, CA Seattle, WA Sunnyvale, CA Toronto, ON Asia-Pacific Singapore Sydney Middle East Dubai
Editor's Notes
- Kicsit clickbait-es cim Mi a hacker? Hackeles. Nem megyunk bele, nem is tudnam kifejteni. Nem lehet mindent kijatszani, nem arrol van szo h mikent lopj meg masokat Technologiat alapjaiban kell megerteni, megnezni mi mire valo, mi mukodik az aktualis helyzetben es atgondolni, hogy ez mikent hasznalhato ki. Amit megtanulsz: hasznalni egy toolt ami jo erre. Par otletet kapni mikent valosithato meg a cel
- Mi az h tunnel, vpn? Ismeros?
- TCP 334 HTTP CONNECT 147