Explaining vulnerabilities, exploits, attack vectors, attack surface reduction, aslr etc to someone who understands The Imperial Deathstar. Presented at Opkoko 2013.1. Live presentation recording in Swedish here: http://www.youtube.com/watch?v=Xi9SRFENiO4

1. Vulnerabilities and Exploitation
APPLICATION SECURITY SCI-FI HIPSTER EDITION!
peter magnusson
twitter: @blaufish_
omegapoint.se
sakerhetspodcasten.se

3. DEFENDER
Imperial Death Star
(legacy application)

5. ATTACKERS
X-Wing squad
(hackers, agile)

6. VULNERABILITY
Reactor core
(document.write, s
printf, eval)

8. ATTACK VECTOR
Exhaust port / shaft
(code paths etc.
connecting input to
vulnerability )

10. EXPLOIT
Torpedo fitting into
exhaust port
Reach and gain
control over
vulnerability,
?id=%27%20SQL

12. EXPLOIT PAYLOAD
Exploding proton warhead
(metasploit meterpreter,
connect back shells, sqli
downloading database,
etc)

14. Improving the
Imperial Death Star

15. ATTACK SURFACE
REDUCTION
Disable by default
Close unused port
Force-field
(firewall)

16. FIX
VULNERABILITY
Exploding core ->
safe non-exploding
core
(sprintf -> snprintf)

17. DON’T JUST FIX
ONE ATTACK
VECTOR
Often multiple
paths to same
vulnernability

18. EXPLOIT
MITIGATION
ASLR: Randomize
location of
vulnerability

19. FIN
Questions?