How to Open School For Young Hackers
•
0 likes•181 views
Slides for our talk on ZeroNights 2016. Contains some info about our team, School CTF and our new project - Young Hacker's School
Report
Share
Report
Share
Download to read offline
Recommended
AOP and Inversion of Conrol
Short review of programming pattern "Inversion of Control" and it's application in aspect oriented programming
Recommended
AOP and Inversion of Conrol
Short review of programming pattern "Inversion of Control" and it's application in aspect oriented programming
SD-WAN Internet Census
Slides from our talk on ZeroNights 2018 about scaning Internet for the SD-WAN solutions. It answers how many SD-WAN nodes are in the Internet and how can you find it and not to lost yourself.
So Your WAF Needs a Parser
Slides from our talk on HighLoad2017 conference about possible performance problems and caveats of usage parsers in high load applications.
WebGoat.SDWAN.Net in Depth
This document summarizes a presentation on SD-WAN security given by Denis Kolegov and Oleg Broslavsky. It discusses the results of an SD-WAN internet census that found thousands of exposed SD-WAN devices, many with known vulnerabilities. Common vulnerabilities found in SD-WAN products include XSS, CSRF, insecure authentication, and the use of hardcoded cryptographic keys. Exploits are demonstrated against several commercial SD-WAN products to highlight real-world risks. The presenters advocate for improving SD-WAN security and responsible vulnerability disclosure.
White-Box HMAC. Make your cipher secure to white-box attacks.
Some slides from my talk on Positive Hack Days VI about white box implementation of HMAC algorithm.
It contains brief explanation of attack context, common use cases for white box cryptography, idea of white box AES implementation and details of white box HMAC implementation.
White box cryptography
Some overview of "box" paradigms, such as black, gray and white boxes. Notes about white-box cryptography and its use cases. Simpliest white-box AES implementation sketch.
How to admin
This document provides instructions for various tasks related to networking and system administration on Linux systems, including:
1) Configuring network interfaces using dhclient or manually assigning an IP address and route.
2) Installing and configuring OpenSSH for remote access and using SSH, SCP for secure file transfers.
3) Using common Linux commands like tcpdump, tshark, ps, kill, service to monitor network traffic, view processes, kill processes, and control services.
4) Additional instructions are provided for using shell commands like head, tail, awk, sed, grep to view logs and parse output from other commands. Guidance is given for capturing network traffic to PCAP files using tcp
ИИ: Этические аспекты проблемы выбора
ИСКУССТВЕННЫЙ ИНТЕЛЛЕКТ: ЭТИЧЕСКИЕ АСПЕКТЫ ПРОБЛЕМЫ ВЫБОРА НА ПРИМЕРЕ БЕСПИЛОТНОГО АВТОМОБИЛЯ
Covert timing channels using HTTP cache headers
This document discusses using HTTP cache headers to create covert timing channels. It describes how information can be encoded in the Last-Modified and ETag response headers and decoded using the If-Modified-Since, If-Unmodified-Since, If-Match, and If-None-Match request headers. The document outlines an implementation of these covert channels using C that achieves transmission speeds of 1-2 bits per second with over 99% accuracy. Issues in synchronization, timing, and CPU load are also addressed.
Covert timing channels using HTTP cache headers
This document discusses using HTTP cache headers to create covert timing channels for transmitting information between hosts without detection. It provides examples of encoding data in the Accept-Language header and describes how headers like Last-Modified and ETag can be used to transmit bits by checking if the page has changed. Issues in implementation are addressed, like needing synchronization. Evaluation shows channels can transmit over 1 bit/second over local networks and around 5 bits/second over the internet. Browser-based channels in JavaScript are also proposed.
More Related Content
More from yalegko
SD-WAN Internet Census
Slides from our talk on ZeroNights 2018 about scaning Internet for the SD-WAN solutions. It answers how many SD-WAN nodes are in the Internet and how can you find it and not to lost yourself.
So Your WAF Needs a Parser
Slides from our talk on HighLoad2017 conference about possible performance problems and caveats of usage parsers in high load applications.
WebGoat.SDWAN.Net in Depth
This document summarizes a presentation on SD-WAN security given by Denis Kolegov and Oleg Broslavsky. It discusses the results of an SD-WAN internet census that found thousands of exposed SD-WAN devices, many with known vulnerabilities. Common vulnerabilities found in SD-WAN products include XSS, CSRF, insecure authentication, and the use of hardcoded cryptographic keys. Exploits are demonstrated against several commercial SD-WAN products to highlight real-world risks. The presenters advocate for improving SD-WAN security and responsible vulnerability disclosure.
White-Box HMAC. Make your cipher secure to white-box attacks.
Some slides from my talk on Positive Hack Days VI about white box implementation of HMAC algorithm.
It contains brief explanation of attack context, common use cases for white box cryptography, idea of white box AES implementation and details of white box HMAC implementation.
White box cryptography
Some overview of "box" paradigms, such as black, gray and white boxes. Notes about white-box cryptography and its use cases. Simpliest white-box AES implementation sketch.
How to admin
This document provides instructions for various tasks related to networking and system administration on Linux systems, including:
1) Configuring network interfaces using dhclient or manually assigning an IP address and route.
2) Installing and configuring OpenSSH for remote access and using SSH, SCP for secure file transfers.
3) Using common Linux commands like tcpdump, tshark, ps, kill, service to monitor network traffic, view processes, kill processes, and control services.
4) Additional instructions are provided for using shell commands like head, tail, awk, sed, grep to view logs and parse output from other commands. Guidance is given for capturing network traffic to PCAP files using tcp
ИИ: Этические аспекты проблемы выбора
ИСКУССТВЕННЫЙ ИНТЕЛЛЕКТ: ЭТИЧЕСКИЕ АСПЕКТЫ ПРОБЛЕМЫ ВЫБОРА НА ПРИМЕРЕ БЕСПИЛОТНОГО АВТОМОБИЛЯ
Covert timing channels using HTTP cache headers
This document discusses using HTTP cache headers to create covert timing channels. It describes how information can be encoded in the Last-Modified and ETag response headers and decoded using the If-Modified-Since, If-Unmodified-Since, If-Match, and If-None-Match request headers. The document outlines an implementation of these covert channels using C that achieves transmission speeds of 1-2 bits per second with over 99% accuracy. Issues in synchronization, timing, and CPU load are also addressed.
Covert timing channels using HTTP cache headers
This document discusses using HTTP cache headers to create covert timing channels for transmitting information between hosts without detection. It provides examples of encoding data in the Accept-Language header and describes how headers like Last-Modified and ETag can be used to transmit bits by checking if the page has changed. Issues in implementation are addressed, like needing synchronization. Evaluation shows channels can transmit over 1 bit/second over local networks and around 5 bits/second over the internet. Browser-based channels in JavaScript are also proposed.
More from yalegko (10)
White-Box HMAC. Make your cipher secure to white-box attacks.
White-Box HMAC. Make your cipher secure to white-box attacks.
How to Open School For Young Hackers
- 1. КАК МЫ ОТКРЫВАЛИ ШКОЛУ ЮНЫХ ХАКЕРОВ
- 2. 01 SiBears 02 School CTF 03 SiBears School
- 10. 02 School CTF
- 12. 2010 2015 2016 … 160 команд из 37 стран 588 команд из 57 стран 571 команда из 51 страны 48 команд из России /
- 21. 01ПРИВЛЕЧЬ
- 27. 02ЗАИНТЕРЕСОВАТЬ
- 32. 03 …
- 37. 04 PROFIT ???