network exploitation

Network Exploitation Mam Koeun Web Security at Trendsec Solution

Upload: khnog

Post on 15-Apr-2017

159 views

Category:

Technology

1 download

Report

Download

Embed Size (px):

TRANSCRIPT

NetworkExploitation

MamKoeunWeb Security at Trendsec Solution

I. AboutmeII. UnderstandingBasicMSF&TermsIII. Howdoesexploitationwork?IV. Howdoesexploitationwork?V. CommonStepsofacompromiseVI. ScanForportsandservicesVII.MetasploitFrameworkBasicsVIII.MeterpreterBasics

TableOfContents

ØMamKoeunØWebSecurity@TrendsecSolutionØCambodianMekongUniversity

AboutMe

• Payload:Actualcodesthattransmitdataordoanyactionsautomaticallyasitspurposes,itrunsafterexploitation

• Exploit:Codethatallowsattackertotakeadvantageofavulnerablesystem

• Vulnerability:Weaknessesthatallowsattackerbreakinto/compromiseasystem’ssecurity

UnderstandingBasicMSF&TERMS

1- Vulnerability 2- Exploit3- Payload

Robber

Vulnerable House

Understanding Basic MSF&TERMS

Howdoesexploitationwork?

Exploit + Payload

Upload/Download Data, malware, rootkit,..

Exploit run first, if succeed payload runs next

Howdoesexploitationwork?

- Scan ports and services running on that target IP

- Identify a vulnerability service / known exploit or private exploit

- Compromise, launch exploit, exploitation plan

CommonStepsOfaCompromise

- Scan a machine using tools like “nmap”- Use port scanner to scan for ports and

services running on remote system - Services scanning with version indentified

same time

ScanForPortsandServices

- Toolfordevelopmentandtestingofvulnerability- Canbeusedfor:

- Penetratingtesting- Exploitresearch- DevelopingIDSsignatures

- StartedbyH.DMoore,2003(Perl)- WasrewritteninRuby,2007- AcquiredbyRapid7,2009- OpenSourceandfreeforuse- Over770+testedexploit- Over228payloads

Metasploit Basics

CommandsdetailinDemontration(VulnerabilityonRPC

DCOM(MS03_026))- Scan a machine using tools like “nmap”

root@khnog#nmap –v –n [Target-IP]root@khnog#nmap –sV –n [Target-IP]

- root@khnog#gcc dcom -0 dcom (compile file)

- root@khnog#./dcom [target-ID] [target-IP]

THANK YOU

Remote and Local Exploitation of Vulnerabilities in ... · Remote and Local Exploitation of Network Drivers Yuriy Bulygin Intel Corporation Security Center of Excellence (SeCoE) JF4-318,

Attacking Network Protocols: A Hackerâ€™s Guide to Capture, Analysis, and Exploitation

Remote and Local Exploitation of Vulnerabilities in Network

Network Against Exploitation and Trafficking of Migrant Workers (Migrant workers Union Thailand)

Intrusion Detection and Malware Analysis - Malware collection...Honeypot taxonomy Low-interaction:simple daemons simulating network services; no exploitation. ... browser exploits

CHAPTER 20 · INTELLIGENCE PLANNING AND DIRECTION CTR-16 INTELLIGENCE PROCESSING AND EXPLOITATION CTR-17 NETWORK EXPLOITATION CTR-18 ... as Chapter 20. CTR-4 GENERAL INFORMATION CAREER

VSAM Exploitation

Free From Exploitation For Education Free From Exploitation For

Intentional Networking: Opportunistic Exploitation of Mobile Network Diversity

Natural resource exploitation - The Economics Network

An Analysis of Wireless Network Security and Practical Exploitation of the Weakness in the Encryption by Qi Liao (2005)

Child Sexual Exploitation: Victim Identification and Resistance … PMH Network mtg 2016 Child Sexual... · Child Sexual Exploitation: Victim Identification and Resistance to Intervention

Capability of the People’s Republic of China to Conduct ... · Conduct Cyber Warfare and Computer Network Exploitation ... Chinese Computer Network ... elite individual hackers

Junya Yimprasert Thai Labour Campaign Network Against Exploitation &

D6.6 Exploitation Plan - SaT5G Project€¦ · SaT5G (761413) D6.6 August 2018 D6.6 Exploitation Plan Topic ICT-07-2017 Project Title Satellite and Terrestrial Network for 5G Project

Remote and Local Exploitation of Network Drivers · Remote and Local Exploitation of Network Drivers Yuriy Bulygin Security Center of Excellence (SeCoE) & PSIRT @ Intel Corporation

United States Government Accountability Office Washington ... · 29/7/2011 · operations including computer network attack, computer network exploitation, and classified funding

It’s a Network - Frank Schneemann TOOLS/CISCO … · Web viewAttacks to a network can be devastating and can result ... Upon successful exploitation of the ... The passphrase

Child Sexual Exploitation Briefing Concerns Network Meeting Operation Striver Revised April 2015

ESLEA and HEPs Work on UKLight Network. ESLEA Exploitation of Switched Lightpaths in E- sciences Applications Exploitation of Switched Lightpaths in E-

SWAT Style – Live Network Crypto Hacking and Exploitation by Kevin Cardwell and Wayne Burke

TwoYearsof ERS-1 Data Exploitation - ESA data exploitation TwoYearsof ERS-1 Data Exploitation M.Albani, V.Beruti & S.D'Elia ERS Exploitation Division, ESRIN, Frascati, Italy TheERS-1mission

Remote and Local Exploitation of Network Drivers - Black Hat | Home

P a g e | Team number: 316 - X-Culture.org9. Small target market OPPORTUNITIES 1. Exploitation of the Reggio Emilia approach network 2. Exploitation of Internet/online channels 3

Practical Exploitation of the Energy-Latency Tradeoff for Sensor Network Broadcast

Network Exploitation

Exploitation of Local Area Network Services

The Near-Term Liability of Exploitation: Exploration and ... Near-Term Liability of Exploitation: Exploration and Exploitation in ... The Near-Term Liability of Exploitation: Exploration

Accounting, billing & payment Support for financial exploitation of network-based services Henk Jonkers Telematica Instituut Enschede, the Netherlands

SIS Sevme Informatique and Services Specialist of tele-exploitation and network surveillance 1

Surf’s Up!Surf’s Up! Daniel McCarney (@binaryparadox) The Next HOPE Exploring Cross Site Request Forgery through social network exploitation

WPA Exploitation in the world of Wireless Network

Exploitation in Meatspace · Exploitation in Meatspace Sometimes an org is just too well defended on the network and host layers You get stuck No worries, just walk in and cause trouble

Pure financial exploitation vs. Hybrid financial exploitation co

Overexploitation Tokyo Tuna Market. Types of Overexploitation Commercial exploitation Subsistence exploitation Recreational exploitation Incidental exploitation