Hacking beyond hacking - Forgotten Chapters - DefCamp 2012

•

1 gostou•847 visualizações

DefCamp

Hacking beyond hacking -
forgotten chapters.

Milan Gabor

Disclaimer
This presentation was created for
educational purposes. I will not take any
responsibility for any action you cause
using the information shown in this
presentation. Please do not contact me
with blackhat type hacking requests.
Thanks!

Original taken from: http://www.lo0.ro/

Developers ?!?!
> fileproxy.ashx?path=ProfilesDo
mainUsernamePathpics/pict
ure.jpg

True vision?
I have been doing same things as other
people.
I just looked them in different way.
Albert Einstein

All our life depends
> demo:demo
> test:test
> admin:admin
> no pass

One life (file)?
Is it getting better?
Or do you feel the same?
Will it make it easier on you now?
You got someone to blame
You say
One love
One life
... file U2

company-xxx.zip 10.345.441 bytes 0.0.000

Algorithm
> Windows domain internal
short-company-name.ro
> Outside not registered
> Register with official registrar
> Have fun!!

Encryption?
TWpjME1ETT0=
Mjc0MDM=
27403

> Don
own!!!

Thank you all!

milan@viris.si

@MilanGabor

Stop me. Talk to me. Bug me.
I am nice guy. ;)

Mais conteúdo relacionado

Semelhante a Hacking beyond hacking - Forgotten Chapters - DefCamp 2012

Strategies for securing your banks & enterprises (from someone who robs bank...ITCamp

HACKED PC : -I don't care attitudeanupriti

Breaking out of restricted RDPSecurity BSides London

The challenges of file formatsAnge Albertini

How to protect your privacy online KevinDRolle

How To Protect Your Privacy OnlineKevinDRolle

Things that go bump on the web - Web Application SecurityChristian Heilmann

Hacking with experts (by anurag dwivedi)Esteban Bedoya

Plone, battle-scarred community with battle tanksMikko Ohtamaa

trojan horse- malware(virus)NamanKikani

Cyber Analysts: who they are, what they do, where they are - Marco Ramilli - ...Codemotion

Rise of the Autobots: Into the Underground of Social Network BotsTom Eston

Introduction to Audio Podcasting Blogworld 2009Allison Sheridan

Thou shalt nottaftosterone

How you can become a hacker with no security experienceAvădănei Andrei

Trojan horseDevAkabari

Libby naylor tech 2k14Marq2014

BSides Rochester 2018: Michael West: Sentry, Or: How I Learned To Stop Worryi...JosephTesta9

If i wake evil 360John Strand

Nerino Petro - Protecting your Digital ASSets: What we can learn from recent ...Clio - Cloud-Based Legal Technology

Semelhante a Hacking beyond hacking - Forgotten Chapters - DefCamp 2012 (20)

Strategies for securing your banks & enterprises (from someone who robs bank...

HACKED PC : -I don't care attitude

Breaking out of restricted RDP

The challenges of file formats

How to protect your privacy online

How To Protect Your Privacy Online

Things that go bump on the web - Web Application Security

Hacking with experts (by anurag dwivedi)

Plone, battle-scarred community with battle tanks

trojan horse- malware(virus)

Cyber Analysts: who they are, what they do, where they are - Marco Ramilli - ...

Rise of the Autobots: Into the Underground of Social Network Bots

Introduction to Audio Podcasting Blogworld 2009

Thou shalt not

How you can become a hacker with no security experience

Trojan horse

Libby naylor tech 2k14

BSides Rochester 2018: Michael West: Sentry, Or: How I Learned To Stop Worryi...

If i wake evil 360

Nerino Petro - Protecting your Digital ASSets: What we can learn from recent ...

Mais de DefCamp

Remote Yacht HackingDefCamp

Mobile, IoT, Clouds… It’s time to hire your own risk manager!DefCamp

The Charter of TrustDefCamp

Internet Balkanization: Why Are We Raising Borders Online?DefCamp

Bridging the gap between CyberSecurity R&D and UXDefCamp

Secure and privacy-preserving data transmission and processing using homomorp...DefCamp

Drupalgeddon 2 – Yet Another Weapon for the AttackerDefCamp

Economical Denial of Sustainability in the Cloud (EDOS)DefCamp

Trust, but verify – Bypassing MFADefCamp

Threat Hunting: From Platitudes to Practical ApplicationDefCamp

Building application security with 0 money downDefCamp

Implementation of information security techniques on modern android based Kio...DefCamp

Lattice based Merkle for post-quantum epochDefCamp

The challenge of building a secure and safe digital environment in healthcareDefCamp

Timing attacks against web applications: Are they still practical?DefCamp

Tor .onions: The Good, The Rotten and The Misconfigured DefCamp

Needles, Haystacks and Algorithms: Using Machine Learning to detect complex t...DefCamp

We will charge you. How to [b]reach vendor’s network using EV charging station.DefCamp

Connect & Inspire Cyber SecurityDefCamp

The lions and the watering holeDefCamp

Mais de DefCamp (20)

Remote Yacht Hacking

Mobile, IoT, Clouds… It’s time to hire your own risk manager!

The Charter of Trust

Internet Balkanization: Why Are We Raising Borders Online?

Bridging the gap between CyberSecurity R&D and UX

Secure and privacy-preserving data transmission and processing using homomorp...

Drupalgeddon 2 – Yet Another Weapon for the Attacker

Economical Denial of Sustainability in the Cloud (EDOS)

Trust, but verify – Bypassing MFA

Threat Hunting: From Platitudes to Practical Application

Building application security with 0 money down

Implementation of information security techniques on modern android based Kio...

Lattice based Merkle for post-quantum epoch

The challenge of building a secure and safe digital environment in healthcare

Timing attacks against web applications: Are they still practical?

Tor .onions: The Good, The Rotten and The Misconfigured

Needles, Haystacks and Algorithms: Using Machine Learning to detect complex t...

We will charge you. How to [b]reach vendor’s network using EV charging station.

Connect & Inspire Cyber Security

The lions and the watering hole

Hacking beyond hacking - Forgotten Chapters - DefCamp 2012

1. Hacking beyond hacking - forgotten chapters. Milan Gabor

2. whoami

3. Cop or not a cop?

4. Before we start

5. Disclaimer This presentation was created for educational purposes. I will not take any responsibility for any action you cause using the information shown in this presentation. Please do not contact me with blackhat type hacking requests. Thanks! Original taken from: http://www.lo0.ro/

6. Where do I come from

7. Romania/n

8. Hackers?

9. Whois is hacking????

10. Miracles?

11.

12. No need to hack!

13. NDAs

14. Where is money spent?

15. Blame who?

16. Developers ?!?! > fileproxy.ashx?path=ProfilesDo mainUsernamePathpics/pict ure.jpg

17. Environment?

18. To see and feel invisible!

19. True vision? I have been doing same things as other people. I just looked them in different way. Albert Einstein

20. All our life depends > demo:demo > test:test > admin:admin > no pass

21. Rookies?

22. Errors?

23. SNMP

24. DOS?

25. One life (file)? Is it getting better? Or do you feel the same? Will it make it easier on you now? You got someone to blame You say One love One life ... file U2 company-xxx.zip 10.345.441 bytes 0.0.000

26. Algorithm > Windows domain internal short-company-name.ro > Outside not registered > Register with official registrar > Have fun!!

27. Puppets?

28. After that

29. Encryption? TWpjME1ETT0= Mjc0MDM= 27403 > Don own!!!

30. Phones

31. Almost best hacking tool

32. When everything else fails!

33.

34. PASSION

35. Or perhaps you should! ;)

36.

37. Thank you all! milan@viris.si @MilanGabor Stop me. Talk to me. Bug me. I am nice guy. ;)