Seu SlideShare está sendo baixado. ×

Get Rich or Die Trying - Black Hat 08072008

Jeremiah Grossman

•

09 de Ago de 2008

• •

Anúncio

Anúncio

Anúncio

Anúncio

Anúncio

Anúncio

Anúncio

Anúncio

Anúncio

Anúncio

Anúncio

Anúncio

Get Rich or Die Trying
Making money on the Web, the black hat way

Get Rich or Die Trying - Black Hat 08072008

Get Rich or Die Trying - Black Hat 08072008

Próximo SlideShare

Próximos SlideShares

Mo' Money Mo' Problems - Making even more money online the black hat way

Mo' Money Mo' Problems - Making even more money online the black hat way

Carregando em…3

×

Confira estes a seguir

Ethical hacking with Python tools

Jose Manuel Ortega Candel

Black hat hackers

Course on Ehtical Hacking - Introduction

How To Become A Successful Hacker In Only 10 Years

Introduction To Ethical Hacking

ethical hacking in the modern times

пр Спроси эксперта про прогнозы ИБ

Andrey Prozorov, CISM, CIPP/E, CDPSE. LA 27001

Get Rich or Die Trying - Black Hat 08072008

09 de Ago de 2008

• •

Baixar para ler offline

Negócios Tecnologia

Forget Cross-Site Scripting. Forget SQL Injection. If you want to make some serious cash on the Web silently and surreptitiously, you don’t need them. You also don’t need noisy scanners, sophisticated proxies, 0-days, or ninja level reverse engineering skills -- all you need is a Web browser, a clue on what to look for, and a few black hat tricks. Generating affiliate advertising revenue from the Website traffic of others, trade stock using corporation information passively gleaned, inhibit the online purchase of sought after items creating artificial scarcity, and so much more. Activities not technically illegal, only violating terms of service.

You may have heard these referred to as business logic flaws, but that name really doesn’t do them justice. It sounds so academic and benign in that context when the truth is anything but. These are not the same ol’ Web hacker attack techniques everyone is familiar with, but the one staring you in the face and missed because gaming a system and making money this way couldn’t be that simple. Plus IDS can’t detect them and Web application firewalls can’t black them. If fact, these types of attacks are so hard to detect (if anyone is actually trying) we aren’t even sure how widespread their use actually is. Time to pull back the cover and expose what’s possible.

Jeremiah Grossman

Founder & CEO em Undisclosed

Forget Cross-Site Scripting. Forget SQL Injection. If you want to make some serious cash on the Web silently and surreptitiously, you don’t need them. You also don’t need noisy scanners, sophisticated proxies, 0-days, or ninja level reverse engineering skills -- all you need is a Web browser, a clue on what to look for, and a few black hat tricks. Generating affiliate advertising revenue from the Website traffic of others, trade stock using corporation information passively gleaned, inhibit the online purchase of sought after items creating artificial scarcity, and so much more. Activities not technically illegal, only violating terms of service.

You may have heard these referred to as business logic flaws, but that name really doesn’t do them justice. It sounds so academic and benign in that context when the truth is anything but. These are not the same ol’ Web hacker attack techniques everyone is familiar with, but the one staring you in the face and missed because gaming a system and making money this way couldn’t be that simple. Plus IDS can’t detect them and Web application firewalls can’t black them. If fact, these types of attacks are so hard to detect (if anyone is actually trying) we aren’t even sure how widespread their use actually is. Time to pull back the cover and expose what’s possible.

Negócios Tecnologia

Mais Conteúdo rRelacionado

Ethical hacking with Python tools

Jose Manuel Ortega Candel

2.7k visualizações

Black hat hackers

10.4k visualizações

Course on Ehtical Hacking - Introduction

15.6k visualizações

How To Become A Successful Hacker In Only 10 Years

5.8k visualizações

Introduction To Ethical Hacking

52.6k visualizações

ethical hacking in the modern times

23.7k visualizações

пр Спроси эксперта про прогнозы ИБ

Andrey Prozorov, CISM, CIPP/E, CDPSE. LA 27001

23.6k visualizações

Ethical hacking with Python tools

Jose Manuel Ortega Candel

2.7k visualizações

Black hat hackers

10.4k visualizações

Course on Ehtical Hacking - Introduction

15.6k visualizações

How To Become A Successful Hacker In Only 10 Years

5.8k visualizações

Introduction To Ethical Hacking

52.6k visualizações

ethical hacking in the modern times

23.7k visualizações

All these vulnerabilities, rarely matter

Jeremiah Grossman

301 visualizações

How to Determine Your Attack Surface in the Healthcare Sector

Jeremiah Grossman

274 visualizações

The Attack Surface of the Healthcare Industry

Jeremiah Grossman

533 visualizações

Exploring the Psychological Mechanisms used in Ransomware Splash Screens

Jeremiah Grossman

660 visualizações

What the Kidnapping & Ransom Economy Teaches Us About Ransomware

Jeremiah Grossman

2.5k visualizações

What the Kidnapping & Ransom Economy Teaches Us About Ransomware

Jeremiah Grossman

3.8k visualizações

Next Generation Endpoint Prtection Buyers Guide

Jeremiah Grossman

811 visualizações

Can Ransomware Ever Be Defeated?

Jeremiah Grossman

748 visualizações

Ransomware is Here: Fundamentals Everyone Needs to Know

Jeremiah Grossman

4k visualizações

Web Application Security Statistics Report 2016

Jeremiah Grossman

1.5k visualizações

15 Years of Web Security: The Rebellious Teenage Years

Jeremiah Grossman

6.2k visualizações

15 Years of Web Security: The Rebellious Teenage Years

Jeremiah Grossman

2.6k visualizações

Where Flow Charts Don’t Go -- Website Security Statistics Report (2015)

Jeremiah Grossman

2.1k visualizações

WhiteHat’s Website Security Statistics Report 2015

Jeremiah Grossman

5.1k visualizações

No More Snake Oil: Why InfoSec Needs Security Guarantees

Jeremiah Grossman

4.6k visualizações

WhiteHat Security 2014 Statistics Report Explained

Jeremiah Grossman

1.4k visualizações

WhiteHat 2014 Website Security Statistics Report

Jeremiah Grossman

3.1k visualizações

Million Browser Botnet

Jeremiah Grossman

6.9k visualizações

WhiteHat Security Website Statistics [Full Report] (2013)

Jeremiah Grossman

3k visualizações

Top Ten Web Hacking Techniques of 2012

Jeremiah Grossman

3.9k visualizações

All these vulnerabilities, rarely matter

Jeremiah Grossman

301 visualizações

How to Determine Your Attack Surface in the Healthcare Sector

Jeremiah Grossman

274 visualizações

The Attack Surface of the Healthcare Industry

Jeremiah Grossman

533 visualizações

Exploring the Psychological Mechanisms used in Ransomware Splash Screens

Jeremiah Grossman

660 visualizações

What the Kidnapping & Ransom Economy Teaches Us About Ransomware

Jeremiah Grossman

2.5k visualizações

What the Kidnapping & Ransom Economy Teaches Us About Ransomware

Jeremiah Grossman

3.8k visualizações

The Estate Plan.pdf

0 visualizações

forecasting.ppt

0 visualizações

How To Design Organizational Habits That Propagate a Culture of Continuous Im...

0 visualizações

0 visualizações

crystalasset-com-.pdf

0 visualizações

35-Qunomedical.pdf

0 visualizações

Pressure BioScience PBIO OTCQB Converts Debt To Equity -In Breakout Mode T...

Jayantachatterjee28

0 visualizações

Solo Calavera.pdf

0 visualizações

Chapter-5-Community Development.pptx

0 visualizações

Fire and Smoke Damage Restoration.pptx

MoldSolutionsInspect1

0 visualizações

Ghosh Dastidar, Sunder, and Shah (2022)pptx (2).pptx

American Marketing Association | Journals

0 visualizações

0 visualizações

Women dress callectin article.docx

0 visualizações

Donations and Pledges Part 1_BLG Build.pdf

0 visualizações

0 visualizações

CurePitchdeck.pdf

0 visualizações

Module 1 - part 1.pptx

0 visualizações

16 Things I've Learned From My Dogs About Business (and life!)

0 visualizações

MARKETING COCA COLA.pdf

DineshKumar207274

0 visualizações

crystalfernandes13

0 visualizações

The Estate Plan.pdf

0 visualizações

forecasting.ppt

0 visualizações

How To Design Organizational Habits That Propagate a Culture of Continuous Im...

0 visualizações

0 visualizações

crystalasset-com-.pdf

0 visualizações

35-Qunomedical.pdf

0 visualizações

Get Rich or Die Trying - Black Hat 08072008

Get Rich or Die Trying Making money on the Web, the black hat way