Hacking .NET Applications: - OWASP AppSec USA 2011

More documents

Recommendations

Info

PRIVET KEY SIGNINGSigned code is based onPrivate Key - 1024 bitSigned Hash of Code………..Identify and Verify the Author
PROTECTION ON DISKProtection - Security by 0b$cur17yCode ObfuscationLogic ObfuscationUnmanaged calls…to C/C++/ASMShells / Packers / Encrypted(code)Try to SHUTDOWNDecompilation
Page 3: ABOUT METrainingMalware AnalysisCod
Page 6 and 7: HACKER VS ATTACKER
Page 9 and 10: NOT IDA PRO
Page 11 and 12: DECOMPILELINES OF CODE TO READC# -
Page 13 and 14: DECOMPILELINES OF CODE TO READC# -
Page 15 and 16: ATTACKING .NETATTACKTHE CODE ON DIS
Page 17 and 18: Attacking .NET Applications: Atrunt
Page 19 and 20: GRAYDRAGONINJECTION
Page 21 and 22: Attacking/CrackingIN MEM |||| ON DI
Page 23 and 24: GRAYWOLFON DISK EDIT
Page 25: RECON YOUR TARGETIf you know the en
Page 28 and 29: DEMO
Page 30 and 31: THE WEAK SPOTSFlip The CheckSet Val
Page 32 and 33: RETURN TRUEbool IsRegistered(){Retu
Page 34 and 35: HACK THE LOGINDEMOPASS THE KEYSHOW
Page 36 and 37: PUBLIC/PRIVATE KEYIf you can beat t
Page 38 and 39: REG CODE REPLAYName:*C5G9P3JON DOEC
Page 40 and 41: REG CODE REPLAYName:*C5G9P3JON DOEC
Page 42 and 43: HACK THE KEYDEMOAPPSEC-USA 2011999c
Page 44 and 45: MID POINTQ&A
Page 46 and 47: WHAT STOPS THIS?What is the securit
Page 52 and 53: CRACK - FAILDEMOFAIL
Page 54: REVIEWDOTFUSCATORObfuscation Causes
Page 57 and 58: UNPROTECTED / PROTECTED
Page 59: IT CAN ‘T ’TBE THAT EZWhat is t
Page 62 and 63: ATTACK VECTORPRIVET KEY SIGNINGSign
Page 64 and 65: FAKE SIGNED DLLTurn Key Checking ON
Page 66 and 67: ATTACK VECTOR (not new)ASM THE OLD
Page 68 and 69: ATTACK VECTORASM THE OLD IS NEW
Page 70 and 71: YOU’RE NOT A HACKERWHY SHOULD YOU
Page 72 and 73: DON’TLOOK
Page 74 and 75: DATA LEAKThe Data sent home isAppli
Page 76 and 77: CRYPTOThe Crypto isDES 64Tripple DE
Page 78 and 79: FIN

Hacking .NET Applications: - OWASP AppSec USA 2011

Create successful ePaper yourself

Delete template?

Save as template?