How to gain access to computers and virtual machines - Hacker Halted

ePAPER READ

DOWNLOAD ePAPER

hackerhalted.com

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

START NOW

Requirements

• The target OS will give us DMA only when we

can pretend to be a storage device

• This requires tricks

– Add SBP-2 unit directory to the bus

• Well documented

– The method is different on each platform

• FireWire stack differences

Weaponizing Lisp - John Kanen Flowers - Hacker Halted

Battery Firmware Hacking - Hacker Halted

DIY SCADA Security - Learn how to build your own ... - Hacker Halted

Blackberry Proof-of-Concept: Malicious Applications - Hacker Halted

Exploiting the Top 10 Database Vulnerabilities and ... - Hacker Halted

Cyber Forensics in the Cloud - Hacker Halted

Turbo Unpacking: A Journey into Malicious Packers - Hacker Halted

FedRAMP – How the Feds Plan to Manage Cloud - Hacker Halted

Hackers Can Kill You - Majid Sarrafzadeh - Hacker Halted

Penetration Testing in a Virtualized Environment - Hacker Halted

TRAINING CLASS CHANGE REQUEST FORM - Hacker Halted

Requirements • The target OS will give us DMA only when we can pretend to be a storage device • This requires tricks – Add SBP-2 unit directory to the bus • Well documented – The method is different on each platform • FireWire stack differences

History of the vulnerability • 2004 PacSec – Maximillian Dornseif – Own by an iPod • 2005 CanSecWest – Maximillian Dornseif and others – All your memory belong to us • 2006 Ruxcon – Adam Boileau – Hit by a bus – Winlockpwn (release – 2008) Not 0day!

Page 1 and 2: How to gain access to computers and
Page 3 and 4: IEEE1394 - History • 1986 - Apple
Page 5: DMA - The vulnerability • DMA - D
Page 9 and 10: Protection - Windows • XP and old
Page 11: http://en.wikipedia.org/wiki/Lockhe

How to gain access to computers and virtual machines - Hacker Halted

Create successful ePaper yourself

Delete template?

Save as template?