CiscoInTheSkyWithDiamonds

More documents

Recommendations

Info

In /isan/bin/vshd, we find a number of external functions called licmgr_* So, let‘s check the licmgr binary There we find a function licmgr_validate_license Yes, there are symbols
Let‘s see what that function does… .text:0806102B mov eax, [ebp+arg_4] ; license file name .text:0806102E mov [esp+10h], eax .text:08061032 mov dword ptr [esp+0Ch], offset aTzUtcIsanBinLi ; "TZ=UTC /isan/bin/liccheck" .text:0806103A mov dword ptr [esp+8], offset aSVS ; "%s -v %s" .text:08061042 mov dword ptr [esp+4], 50h ; maxlen .text:0806104A lea eax, [ebp+command] .text:0806104D mov [esp], eax ; s .text:08061050 call _snprintf .text:08061055 lea eax, [ebp+command] .text:08061058 mov [esp], eax ; command .text:0806105B call _system
Page 1: Observed by Greg & FX
Page 4 and 5: 1967: First systems with IBM CP-67
Page 6 and 7: 10 GigE Virtual Switch
Page 9 and 10: Cisco Nexus Operating System (NX-OS
Page 11 and 12: This being a VMware VM, we can boot
Page 13: The N1kV requires license files to
Page 17 and 18: Exploitation is a bit tricky though
Page 19 and 20: The jailbreak script adds a user to
Page 21 and 22: Why talk about licensing? CSCud0142
Page 23 and 24: 6 bytes (12 hex chars) “signature
Page 25 and 26: We could now exercise our 1337 reve
Page 28 and 29: CDP is everywhere in Cisco land VM
Page 30 and 31: The VSM stores a set of “opaque d
Page 32 and 33: Offset Size Meaning 0x0 8 Bit Proto
Page 35 and 36: VEMs register themselves with the V
Page 37 and 38: Cisco’s documentation says 128 Bi
Page 39: 1. Compromise a web server in a vir
Page 42 and 43: At Phenoelit, FtR is the go-to-guy
Page 45: Our work with Cisco PSIRT goes back

CiscoInTheSkyWithDiamonds

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?