me::title_else
My Schedule
10:00 AM
to 11:00 AM
FX: Router Exploitation
155 schedule::attendees
Location
Roman Ballroom
eventtype Infrastructure
Felix 'FX' Lindner
event::about Exploitation of active networking equipment has its own history and challenges. This session will take you through the full spectrum of possible attacks, what they yield and how the art of exploitation in that particular field evolved over the recent past to its present state. We will cover attacks on Cisco equipment and compare them to other specimen in the field, talk about the challenges you face to get a simple shell on such devices and what to actually do with them once you made it.
event::tags Network, Infrastructure
11:15 AM
to 12:30 PM
Dino Dai Zovi: Advanced Mac OS X Rootkits
63 schedule::attendees
Location
Augustus Ballroom 1-2
eventtype Rootkits
Dino Dai Zovi
event::about The Mac OS X kernel (xnu) is a hybrid BSD and Mach kernel. While Unix-oriented rootkit techniques are pretty well known, Mach-based rootkit techniques have not been as thoroughly publicly explored. This presentation will cover a variety of rootkit techniques for both user-space and kernel-space rootkits using unique and poorly understood or documented Mac OS X and Mach features.
1:45 PM
to 3:00 PM
Erez Metula: Managed Code Rootkits
84 schedule::attendees
Location
Augustus Ballroom 1-2
eventtype Rootkits
Erez Metula
event::about This presentation introduces a new concept of application level rootkit attacks on managed code environments, enabling an attacker to change the language runtime implementation, and to hide malicious code inside its core. Taking the ".NET Rootkits" concepts a step further, while covering generic methods of malware development (rootkits,backdoors,logic manipulation, etc.) for the .NET framework and Java's JVM, by changing its behavior. It includes demos of information logging, reverse shells, backdoors, encryption keys fixation, and other nasty things.
This presentation will introduce the new version of ".Net-Sploit" - a generic language modification tool, used to implement the rootkit concepts. Information about .NET modification - The Whitepaper, .NET-Sploit, and source code can be found here.
This presentation will introduce the new version of ".Net-Sploit" - a generic language modification tool, used to implement the rootkit concepts. Information about .NET modification - The Whitepaper, .NET-Sploit, and source code can be found here.
3:15 PM
to 4:30 PM
Steve Topletz, Jonathan Logan & Kyle Williams: Global Spying
81 schedule::attendees
Location
Milano Ballroom 5-6-7-8
eventtype Privacy
Steve Topletz, Jonathan Logan, Kyle Williams
event::about When talking about the threat of Internet surveillance the argument most often presented is that "there is so much traffic that any one conversation or email won't be picked up unless there is reason to suspect those concerned; it is impossible that "
4:45 PM
to 6:00 PM
Alexander Tereshkin & Rafal Wojtczuk: Introducing Ring -3 Rootkits
104 schedule::attendees
Location
Augustus Ballroom 1-2
eventtype Rootkits
Alexander Tereshkin, Rafal Wojtczuk
event::about Rootkit Evolution over the past decade: Ring 3 == usermode rootkits
Ring 0 == kernelmode rootkits
Ring -1 == hypervisor rootkits (BluePill)
Ring -2 == SMM rootkits
Now, we're going to introduce Ring -3 Rootkits.
Ring 0 == kernelmode rootkits
Ring -1 == hypervisor rootkits (BluePill)
Ring -2 == SMM rootkits
Now, we're going to introduce Ring -3 Rootkits.
6:00 PM
to 7:30 AM
footer::loading