SlideShare uma empresa Scribd logo
1 de 28
Автономный сетевой шпион.
WiFi Pineapple usage in the wild
             21/08/2012
              DCG #7812
         г. Санкт-Петербург   by
                              @ygoltsev
                              @d0znpp
                              @d_olex
Few words about myself
    Security expert/
Penetration testing team
                                             Community
                                              member




PHDays g00n

                                               Editor




                 Defcon Russia (DCG #7812)               2
WiFi Pineapple




                                  by


http://cloud.wifipineapple.com/


      Defcon Russia (DCG #7812)        3
Functionality
• Stealth Access Point for Man-in-the-Middle
  attacks
• Mobile Broadband connectivity (3g/4g via USB)
• Manage from afar with persistent SSH tunnels
  and meterpreter
• Relay or Deauth attack with auxiliary WiFi
  adapter
• Web-based management simplify MITM attacks
• Easily concealed and battery powered
• Expandable with community modules

                   Defcon Russia (DCG #7812)      4
Based on
AP121U (http://bit.ly/NAvaq9)
- 45 $

                      +
Jasager (OpenWRT) (http://bit.ly/EgvNV)
- free


                  Defcon Russia (DCG #7812)   5
AP121U

•   93 x 70 x 26mm
•   74g
•   IEEE 802.11b/g/n
•   2x Ethernet
•   USB 2.0
•   400 MHz

                   Defcon Russia (DCG #7812)   6
Jasager
- Linux (kernel 3.2)
- hostapd (http://hostap.epitest.fi/hostapd/)
     hostapd is a user space daemon for access point and
     authentication servers.
- Karma (http://www.digininja.org/karma/)
     Patch for hostapd.
     Set of patches to access point software to get it to
     respond to probe requests not just for itself but for any
     ESSID requested.

                       Defcon Russia (DCG #7812)                 7
Equalness




   =

 Defcon Russia (DCG #7812)   8
But
• 93 x 70 x 26mm
• 74g

              and 100 $...




                   Defcon Russia (DCG #7812)   9
money - not so important




        Defcon Russia (DCG #7812)   10
Yammi!!




Defcon Russia (DCG #7812)   11
Usage

- As a home router
- As a tool for penetration testing
- As an energy independent network spy




                 Defcon Russia (DCG #7812)   12
Some statistics
• Location: Big Mall, Food Court
• Wi-Fi SSID –
  ‘Ne_podkluchaytes_k_etoy_to4ke’
• Action:
     Respond to all probe request.
     Disconnect.
     Ignore MAC next time.

                 Defcon Russia (DCG #7812)   13
Over 9000….




P.S. Over 100

                  Defcon Russia (DCG #7812)   14
More interesting




~ 189 minutes

                Defcon Russia (DCG #7812)   15
More interesting
• Mobile Juice pack




~ More than 6 hours

                  Defcon Russia (DCG #7812)   16
And what if?




  Defcon Russia (DCG #7812)   17
Other stuff
• More than 20 add-ons (modules)
• Build in web/dns/ssh services
• tcpdump/air*/ettercap/sslstrip




                 Defcon Russia (DCG #7812)   18
Cover story: fairy tale




       Defcon Russia (DCG #7812)   19
Cover story: legendary legend




          Defcon Russia (DCG #7812)   20
Cover story: box location




        Defcon Russia (DCG #7812)   21
Cover story: box location




        Defcon Russia (DCG #7812)   22
Cover story: packing the box
• Pelican boxes – the best choice




                   Defcon Russia (DCG #7812)   23
Cover story: setting up environment
• Setting up SSH tunnel
• …
• Do the stuff




                  Defcon Russia (DCG #7812)   24
Cover story: Catch me if you can
• Wipe all shit!




                          +
                   Defcon Russia (DCG #7812)   25
Bonus track: Wipe video




        Defcon Russia (DCG #7812)   26
Bonus track: Wipe




     Defcon Russia (DCG #7812)   27
Thanks for your attention!

       @ygoltsev
       ygoltsev@ptsecuity.ru



        Defcon Russia (DCG #7812)   28

Mais conteúdo relacionado

Mais procurados

CSW2017 Yuhao song+Huimingliu cyber_wmd_vulnerable_IoT
CSW2017 Yuhao song+Huimingliu cyber_wmd_vulnerable_IoTCSW2017 Yuhao song+Huimingliu cyber_wmd_vulnerable_IoT
CSW2017 Yuhao song+Huimingliu cyber_wmd_vulnerable_IoT
CanSecWest
 
Getting_Started_With_Docker
Getting_Started_With_DockerGetting_Started_With_Docker
Getting_Started_With_Docker
Jason Greathouse
 

Mais procurados (19)

Malware Collection and Analysis via Hardware Virtualization
Malware Collection and Analysis via Hardware VirtualizationMalware Collection and Analysis via Hardware Virtualization
Malware Collection and Analysis via Hardware Virtualization
 
CSW2017 Yuhao song+Huimingliu cyber_wmd_vulnerable_IoT
CSW2017 Yuhao song+Huimingliu cyber_wmd_vulnerable_IoTCSW2017 Yuhao song+Huimingliu cyber_wmd_vulnerable_IoT
CSW2017 Yuhao song+Huimingliu cyber_wmd_vulnerable_IoT
 
Encryption Boot Camp at JavaZone 2010
Encryption Boot Camp at JavaZone 2010Encryption Boot Camp at JavaZone 2010
Encryption Boot Camp at JavaZone 2010
 
Строим ханипот и выявляем DDoS-атаки
Строим ханипот и выявляем DDoS-атакиСтроим ханипот и выявляем DDoS-атаки
Строим ханипот и выявляем DDoS-атаки
 
NDIS Packet of Death
NDIS Packet of DeathNDIS Packet of Death
NDIS Packet of Death
 
[CB20] Vulnerabilities of Machine Learning Infrastructure by Sergey Gordeychik
[CB20] Vulnerabilities of Machine Learning Infrastructure by Sergey Gordeychik[CB20] Vulnerabilities of Machine Learning Infrastructure by Sergey Gordeychik
[CB20] Vulnerabilities of Machine Learning Infrastructure by Sergey Gordeychik
 
Designing and Attacking DRM (RSA 2008)
Designing and Attacking DRM (RSA 2008)Designing and Attacking DRM (RSA 2008)
Designing and Attacking DRM (RSA 2008)
 
Getting_Started_With_Docker
Getting_Started_With_DockerGetting_Started_With_Docker
Getting_Started_With_Docker
 
DEFCON 22: Bypass firewalls, application white lists, secure remote desktops ...
DEFCON 22: Bypass firewalls, application white lists, secure remote desktops ...DEFCON 22: Bypass firewalls, application white lists, secure remote desktops ...
DEFCON 22: Bypass firewalls, application white lists, secure remote desktops ...
 
Linux Security APIs and the Chromium Sandbox
Linux Security APIs and the Chromium SandboxLinux Security APIs and the Chromium Sandbox
Linux Security APIs and the Chromium Sandbox
 
Peter Gutmann Presentation - CSO Perspectives Roadshow Auckland 9th Mar 2015
Peter Gutmann Presentation - CSO Perspectives Roadshow Auckland 9th Mar 2015Peter Gutmann Presentation - CSO Perspectives Roadshow Auckland 9th Mar 2015
Peter Gutmann Presentation - CSO Perspectives Roadshow Auckland 9th Mar 2015
 
BSides Roma 2018 - Red team techniques
BSides Roma 2018 - Red team techniquesBSides Roma 2018 - Red team techniques
BSides Roma 2018 - Red team techniques
 
Hacktivity2014: Virtual Machine Introspection to Detect and Protect
Hacktivity2014: Virtual Machine Introspection to Detect and ProtectHacktivity2014: Virtual Machine Introspection to Detect and Protect
Hacktivity2014: Virtual Machine Introspection to Detect and Protect
 
Rafa Sánchez & Fran Gomez - IoCker - When IPv6 met malware [rooted2019]
Rafa Sánchez & Fran Gomez - IoCker - When IPv6 met malware [rooted2019]Rafa Sánchez & Fran Gomez - IoCker - When IPv6 met malware [rooted2019]
Rafa Sánchez & Fran Gomez - IoCker - When IPv6 met malware [rooted2019]
 
SSL/TLS for Mortals (Devoxx FR 2018)
SSL/TLS for Mortals (Devoxx FR 2018)SSL/TLS for Mortals (Devoxx FR 2018)
SSL/TLS for Mortals (Devoxx FR 2018)
 
Openssl
OpensslOpenssl
Openssl
 
Qinghai Tang, pacsec english-version-final
Qinghai Tang, pacsec english-version-finalQinghai Tang, pacsec english-version-final
Qinghai Tang, pacsec english-version-final
 
Open Source Security
Open Source SecurityOpen Source Security
Open Source Security
 
MMW Anti-Sandbox Techniques
MMW Anti-Sandbox TechniquesMMW Anti-Sandbox Techniques
MMW Anti-Sandbox Techniques
 

Semelhante a Ygoltsev dcg 21_08_wifiineapple

Semelhante a Ygoltsev dcg 21_08_wifiineapple (20)

Sergey Belov - Покажите нам Impact! Доказываем угрозу в сложных условиях
Sergey Belov - Покажите нам Impact! Доказываем угрозу в сложных условияхSergey Belov - Покажите нам Impact! Доказываем угрозу в сложных условиях
Sergey Belov - Покажите нам Impact! Доказываем угрозу в сложных условиях
 
7.4. Show impact [bug bounties]
7.4. Show impact [bug bounties]7.4. Show impact [bug bounties]
7.4. Show impact [bug bounties]
 
Under the hood of modern HIPS-es and Windows access control mechanisms
Under the hood of modern HIPS-es and Windows access control mechanismsUnder the hood of modern HIPS-es and Windows access control mechanisms
Under the hood of modern HIPS-es and Windows access control mechanisms
 
nosymbols - defcon russia 20
nosymbols - defcon russia 20nosymbols - defcon russia 20
nosymbols - defcon russia 20
 
Scylla Summit 2018: The Short and Straight Road That Leads from Cassandra to ...
Scylla Summit 2018: The Short and Straight Road That Leads from Cassandra to ...Scylla Summit 2018: The Short and Straight Road That Leads from Cassandra to ...
Scylla Summit 2018: The Short and Straight Road That Leads from Cassandra to ...
 
Vulnerabilities of machine learning infrastructure
Vulnerabilities of machine learning infrastructureVulnerabilities of machine learning infrastructure
Vulnerabilities of machine learning infrastructure
 
Building the World's Largest GPU
Building the World's Largest GPUBuilding the World's Largest GPU
Building the World's Largest GPU
 
Testing CAN network with help of CANToolz
Testing CAN network with help of CANToolzTesting CAN network with help of CANToolz
Testing CAN network with help of CANToolz
 
WebGoat.SDWAN.Net in Depth
WebGoat.SDWAN.Net in DepthWebGoat.SDWAN.Net in Depth
WebGoat.SDWAN.Net in Depth
 
WebGoat.SDWAN.Net in Depth: SD-WAN Security Assessment
WebGoat.SDWAN.Net in Depth: SD-WAN Security Assessment WebGoat.SDWAN.Net in Depth: SD-WAN Security Assessment
WebGoat.SDWAN.Net in Depth: SD-WAN Security Assessment
 
LinuxLabs 2017 talk: Container monitoring challenges
LinuxLabs 2017 talk: Container monitoring challengesLinuxLabs 2017 talk: Container monitoring challenges
LinuxLabs 2017 talk: Container monitoring challenges
 
redGuardian DP100 large scale DDoS mitigation solution
redGuardian DP100 large scale DDoS mitigation solutionredGuardian DP100 large scale DDoS mitigation solution
redGuardian DP100 large scale DDoS mitigation solution
 
Data Streaming Ecosystem Management at Booking.com
Data Streaming Ecosystem Management at Booking.com Data Streaming Ecosystem Management at Booking.com
Data Streaming Ecosystem Management at Booking.com
 
GR740 User day
GR740 User dayGR740 User day
GR740 User day
 
A Software Defined WAN Architecture
A Software Defined WAN ArchitectureA Software Defined WAN Architecture
A Software Defined WAN Architecture
 
Make The Impossible Possible - Industrial PoE Brochure 2014
Make The Impossible Possible - Industrial PoE Brochure 2014Make The Impossible Possible - Industrial PoE Brochure 2014
Make The Impossible Possible - Industrial PoE Brochure 2014
 
[Defcon Russia #29] Алексей Тюрин - Spring autobinding
[Defcon Russia #29] Алексей Тюрин - Spring autobinding[Defcon Russia #29] Алексей Тюрин - Spring autobinding
[Defcon Russia #29] Алексей Тюрин - Spring autobinding
 
Beginners guide-to-reverse-engineering-android-apps-pau-oliva-fora-viaforensi...
Beginners guide-to-reverse-engineering-android-apps-pau-oliva-fora-viaforensi...Beginners guide-to-reverse-engineering-android-apps-pau-oliva-fora-viaforensi...
Beginners guide-to-reverse-engineering-android-apps-pau-oliva-fora-viaforensi...
 
Node.js
Node.jsNode.js
Node.js
 
Grokking Grok: Monitorama PDX 2015
Grokking Grok: Monitorama PDX 2015Grokking Grok: Monitorama PDX 2015
Grokking Grok: Monitorama PDX 2015
 

Último

saputara Escort💋 Call Girl (Ramya) Service #saputara Call Girl @Independent G...
saputara Escort💋 Call Girl (Ramya) Service #saputara Call Girl @Independent G...saputara Escort💋 Call Girl (Ramya) Service #saputara Call Girl @Independent G...
saputara Escort💋 Call Girl (Ramya) Service #saputara Call Girl @Independent G...
mountabuangels4u
 
bhachau Escort💋 Call Girl (Ramya) Service #bhachau Call Girl @Independent Girls
bhachau Escort💋 Call Girl (Ramya) Service #bhachau Call Girl @Independent Girlsbhachau Escort💋 Call Girl (Ramya) Service #bhachau Call Girl @Independent Girls
bhachau Escort💋 Call Girl (Ramya) Service #bhachau Call Girl @Independent Girls
mountabuangels4u
 
sample sample sample sample sample sample
sample sample sample sample sample samplesample sample sample sample sample sample
sample sample sample sample sample sample
Casey Keith
 
Sample sample sample sample sample sample
Sample sample sample sample sample sampleSample sample sample sample sample sample
Sample sample sample sample sample sample
Casey Keith
 
Rajkot Escort💋 Call Girl (Ramya) Service #Rajkot Call Girl @Independent Girls
Rajkot Escort💋 Call Girl (Ramya) Service #Rajkot Call Girl @Independent GirlsRajkot Escort💋 Call Girl (Ramya) Service #Rajkot Call Girl @Independent Girls
Rajkot Escort💋 Call Girl (Ramya) Service #Rajkot Call Girl @Independent Girls
mountabuangels4u
 
Four Famous Temples In Jammu and Kashmir
Four Famous Temples In Jammu and KashmirFour Famous Temples In Jammu and Kashmir
Four Famous Temples In Jammu and Kashmir
SuYatra
 

Último (20)

Raiganj Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Raiganj Call Girls 🥰 8617370543 Service Offer VIP Hot ModelRaiganj Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Raiganj Call Girls 🥰 8617370543 Service Offer VIP Hot Model
 
saputara Escort💋 Call Girl (Ramya) Service #saputara Call Girl @Independent G...
saputara Escort💋 Call Girl (Ramya) Service #saputara Call Girl @Independent G...saputara Escort💋 Call Girl (Ramya) Service #saputara Call Girl @Independent G...
saputara Escort💋 Call Girl (Ramya) Service #saputara Call Girl @Independent G...
 
Krishnanagar Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Krishnanagar Call Girls 🥰 8617370543 Service Offer VIP Hot ModelKrishnanagar Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Krishnanagar Call Girls 🥰 8617370543 Service Offer VIP Hot Model
 
bhachau Escort💋 Call Girl (Ramya) Service #bhachau Call Girl @Independent Girls
bhachau Escort💋 Call Girl (Ramya) Service #bhachau Call Girl @Independent Girlsbhachau Escort💋 Call Girl (Ramya) Service #bhachau Call Girl @Independent Girls
bhachau Escort💋 Call Girl (Ramya) Service #bhachau Call Girl @Independent Girls
 
Overview of Lesotho 's natural beauty tourist attractions
Overview of Lesotho 's natural beauty tourist attractionsOverview of Lesotho 's natural beauty tourist attractions
Overview of Lesotho 's natural beauty tourist attractions
 
Pithoragarh Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Pithoragarh Call Girls 🥰 8617370543 Service Offer VIP Hot ModelPithoragarh Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Pithoragarh Call Girls 🥰 8617370543 Service Offer VIP Hot Model
 
Ooty Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Ooty Call Girls 🥰 8617370543 Service Offer VIP Hot ModelOoty Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Ooty Call Girls 🥰 8617370543 Service Offer VIP Hot Model
 
Elevate Your Busy Season Email Marketing, Holly May Webinar.pptx
Elevate Your Busy Season Email Marketing, Holly May Webinar.pptxElevate Your Busy Season Email Marketing, Holly May Webinar.pptx
Elevate Your Busy Season Email Marketing, Holly May Webinar.pptx
 
Siliguri Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Siliguri Call Girls 🥰 8617370543 Service Offer VIP Hot ModelSiliguri Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Siliguri Call Girls 🥰 8617370543 Service Offer VIP Hot Model
 
sample sample sample sample sample sample
sample sample sample sample sample samplesample sample sample sample sample sample
sample sample sample sample sample sample
 
Uttarkashi Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Uttarkashi Call Girls 🥰 8617370543 Service Offer VIP Hot ModelUttarkashi Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Uttarkashi Call Girls 🥰 8617370543 Service Offer VIP Hot Model
 
Sample sample sample sample sample sample
Sample sample sample sample sample sampleSample sample sample sample sample sample
Sample sample sample sample sample sample
 
Prayagraj Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Prayagraj Call Girls 🥰 8617370543 Service Offer VIP Hot ModelPrayagraj Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Prayagraj Call Girls 🥰 8617370543 Service Offer VIP Hot Model
 
Rajkot Escort💋 Call Girl (Ramya) Service #Rajkot Call Girl @Independent Girls
Rajkot Escort💋 Call Girl (Ramya) Service #Rajkot Call Girl @Independent GirlsRajkot Escort💋 Call Girl (Ramya) Service #Rajkot Call Girl @Independent Girls
Rajkot Escort💋 Call Girl (Ramya) Service #Rajkot Call Girl @Independent Girls
 
Four Famous Temples In Jammu and Kashmir
Four Famous Temples In Jammu and KashmirFour Famous Temples In Jammu and Kashmir
Four Famous Temples In Jammu and Kashmir
 
Top travel agency in panchkula - Best travel agents in panchkula
Top  travel agency in panchkula - Best travel agents in panchkulaTop  travel agency in panchkula - Best travel agents in panchkula
Top travel agency in panchkula - Best travel agents in panchkula
 
Ramnagar Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Ramnagar Call Girls 🥰 8617370543 Service Offer VIP Hot ModelRamnagar Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Ramnagar Call Girls 🥰 8617370543 Service Offer VIP Hot Model
 
Bhadrachalam Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Bhadrachalam Call Girls 🥰 8617370543 Service Offer VIP Hot ModelBhadrachalam Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Bhadrachalam Call Girls 🥰 8617370543 Service Offer VIP Hot Model
 
Mumbai Call Girls In 09167354423, Mira Road Call Girls.docx
Mumbai Call Girls In 09167354423, Mira Road Call Girls.docxMumbai Call Girls In 09167354423, Mira Road Call Girls.docx
Mumbai Call Girls In 09167354423, Mira Road Call Girls.docx
 
Tourist_Attractions_in_Lesotho_prepared_by_Reabetsoe_Bereng.pptx
Tourist_Attractions_in_Lesotho_prepared_by_Reabetsoe_Bereng.pptxTourist_Attractions_in_Lesotho_prepared_by_Reabetsoe_Bereng.pptx
Tourist_Attractions_in_Lesotho_prepared_by_Reabetsoe_Bereng.pptx
 

Ygoltsev dcg 21_08_wifiineapple

  • 1. Автономный сетевой шпион. WiFi Pineapple usage in the wild 21/08/2012 DCG #7812 г. Санкт-Петербург by @ygoltsev @d0znpp @d_olex
  • 2. Few words about myself Security expert/ Penetration testing team Community member PHDays g00n Editor Defcon Russia (DCG #7812) 2
  • 3. WiFi Pineapple by http://cloud.wifipineapple.com/ Defcon Russia (DCG #7812) 3
  • 4. Functionality • Stealth Access Point for Man-in-the-Middle attacks • Mobile Broadband connectivity (3g/4g via USB) • Manage from afar with persistent SSH tunnels and meterpreter • Relay or Deauth attack with auxiliary WiFi adapter • Web-based management simplify MITM attacks • Easily concealed and battery powered • Expandable with community modules Defcon Russia (DCG #7812) 4
  • 5. Based on AP121U (http://bit.ly/NAvaq9) - 45 $ + Jasager (OpenWRT) (http://bit.ly/EgvNV) - free Defcon Russia (DCG #7812) 5
  • 6. AP121U • 93 x 70 x 26mm • 74g • IEEE 802.11b/g/n • 2x Ethernet • USB 2.0 • 400 MHz Defcon Russia (DCG #7812) 6
  • 7. Jasager - Linux (kernel 3.2) - hostapd (http://hostap.epitest.fi/hostapd/) hostapd is a user space daemon for access point and authentication servers. - Karma (http://www.digininja.org/karma/) Patch for hostapd. Set of patches to access point software to get it to respond to probe requests not just for itself but for any ESSID requested. Defcon Russia (DCG #7812) 7
  • 8. Equalness = Defcon Russia (DCG #7812) 8
  • 9. But • 93 x 70 x 26mm • 74g and 100 $... Defcon Russia (DCG #7812) 9
  • 10. money - not so important Defcon Russia (DCG #7812) 10
  • 12. Usage - As a home router - As a tool for penetration testing - As an energy independent network spy Defcon Russia (DCG #7812) 12
  • 13. Some statistics • Location: Big Mall, Food Court • Wi-Fi SSID – ‘Ne_podkluchaytes_k_etoy_to4ke’ • Action: Respond to all probe request. Disconnect. Ignore MAC next time. Defcon Russia (DCG #7812) 13
  • 14. Over 9000…. P.S. Over 100 Defcon Russia (DCG #7812) 14
  • 15. More interesting ~ 189 minutes Defcon Russia (DCG #7812) 15
  • 16. More interesting • Mobile Juice pack ~ More than 6 hours Defcon Russia (DCG #7812) 16
  • 17. And what if? Defcon Russia (DCG #7812) 17
  • 18. Other stuff • More than 20 add-ons (modules) • Build in web/dns/ssh services • tcpdump/air*/ettercap/sslstrip Defcon Russia (DCG #7812) 18
  • 19. Cover story: fairy tale Defcon Russia (DCG #7812) 19
  • 20. Cover story: legendary legend Defcon Russia (DCG #7812) 20
  • 21. Cover story: box location Defcon Russia (DCG #7812) 21
  • 22. Cover story: box location Defcon Russia (DCG #7812) 22
  • 23. Cover story: packing the box • Pelican boxes – the best choice Defcon Russia (DCG #7812) 23
  • 24. Cover story: setting up environment • Setting up SSH tunnel • … • Do the stuff Defcon Russia (DCG #7812) 24
  • 25. Cover story: Catch me if you can • Wipe all shit! + Defcon Russia (DCG #7812) 25
  • 26. Bonus track: Wipe video Defcon Russia (DCG #7812) 26
  • 27. Bonus track: Wipe Defcon Russia (DCG #7812) 27
  • 28. Thanks for your attention! @ygoltsev ygoltsev@ptsecuity.ru Defcon Russia (DCG #7812) 28