Upload File

unconventional privilege escalation - rootcon › rootcon 2 › talks › rootcon 2...nessus...

  • Home
  • Documents
  • Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
23

Upload: others

Post on 06-Jul-2020

12 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 2: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 3: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 4: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 5: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:

WARNINGContents of this presentationare for educational purposes

only. It is strongly suggestedthat you do not use this

knowledge for illegal purposes!

Page 6: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 7: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:

Your account jdelacruz has been created. Your password is: O9mx****

Page 8: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 9: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 10: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 11: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 12: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 13: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 14: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 15: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 16: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 17: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 18: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 19: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 20: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 21: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 22: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 23: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:

AV is Dead! - ROOTCON 10/Talks/ROOTCON 10 - Is AV D… · winresume.exe Load kernel and other drivers MBR Master Boot Record Loads the VBR VBR Volume Boot Record Loads the Bootmgr

“If you can manipulate the data, 8/Talks/ROOTCON 8...CSP • Content-Security-Policy -Chrome 25 (Firefox nightlies) • X-Content-Security-Policy -Firefox 4+ • X-WebKit-CSP -WebKitbrowsers

bug hunting 101 - ROOTCON 11/Trainings...• Jay Turla a.k.a The Jetman • Application Security Engineer @Bugcrowd • Metasploit Contributor: Host Header Injection Detection, BisonWare

Introduction Google Hacking Techniques - media.rootcon.org 1/Talks/ROOTCON 2 - Google... · Google Hacking Techniques How to Protect your Websites •First step in attacking websites

BIBLIOGRAPHY - University of Michigan Press · BIBLIOGRAPHY Abbreviations: The ... JRMES: Journal of Roman Military Equipment Studies. ... Roman Military Equipment from the Punic

FEATURE SHEETlucchettahomes.com/wp-content/uploads/2020/06/LOT-29-PRINTABL… · tennis courts, room, librar grass cutting walkway shov grass cutt tennis cou Association Fee: $262/month

Incident Response for Targeted attacks 9/Talks/ROOTCON 9 - Incident... · Alienvault OSSIM Open Source SIEM (GPL) Version 5.0 released on April 20, 2015 Based on third party Open

Metroid · 2017. 11. 3. · Vision, seeing numerous pieces of marvellous storyboard and sketch artworF' BONUS GALLERY Put your Mii BOBBLE-HEAD on your ship dashboard, purchase a SCREEN-SHOV

alquimista78.files.wordpress.com · I've John researched—one other a 'Chen Whitehouse, come¿jcxn "The most Of con With for Of The Shov BOOK penguin.com U.s.a. $10.00 409 BEF OF

TABELA DE PREÇOS - midiakit.verdesmares.com.brmidiakit.verdesmares.com.br/app/uploads/2016/10/wordpress_tabela... · AUTO ESPO SHOV TMAX DFAU FANT SHOD DOMA Nordeste Rural P. Empresas

PatientPop · 2019. 12. 27. · George Snow Scholarship Fund, and Presi- dent Tim Snow announced the dancers col- lectively raised $211,000, a record. The reality shov/s Chelsie Hightower

Diving To ReconNG (Read-Only) - ROOTCON® Media Server 7/Talks/ROOTCON 7... · 2017-03-25 · lookups, enumerating hostnames, enumerating subdomains,enumeratingcompanyemails,etc

Domain Discovery - ROOTCON 11/Trainings/RECON.pdf · A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform ★Kubebot: A security testing Slackbot

Gaithersburg’s Hometown Newspaper | Serving Kentlands ......Program means no more lawn mowing, snow shov-eling, or leaf raking. The homes range in price from 1.2 to 1.4 million and

RC11 Sponsorship Kit - ROOTCON 11/Docs/ROOTCON 11 Sponsors… · Universal Robina Corporation ... has a long history of digital threat and malware ... Major Sponsorship Add-ons Logo

ROOTCON 13 Pilot Study on Semi-Automated Patch … 13/Talks/Pilot Study on...BlackHatUSA 2019, AsiaCCS 2019, AIS3 2018/2016, PHDays IV, SECCON,etc 3 Agenda Background Extracting Security

The VOHO Campaign - ROOTCON 7/Talks/ROOTCON 7 - The VOH… · The VOHO Campaign Paper Authors: Will Gragido,Sr. Manager RSA First Watch Chris ‘Tophs’ Elisan, Principal Malware

tfplnewspaper.twinfallspubliclibrary.org/files/Times-News_TN661/PDF/2004_12_09.pdfTwin Kalh Goodmc \V k /Viiii-;i,, Toda VasSk. ' Scat shov 49.1 M a(;k; V/ Them bones: Sc 'Buhl Woman’cl

Cloud Security Suite - ROOTCON 12/Talks/Defending cloud... · •Active Member of Null Bangalore Chapter •Researcher at heart. Why AWS/GCP/Azure Audit? •Misconfigured Access (IAM,

Unpackers in a World of Signature-less Malware Detection 7/Talks/ROOTCON 7... · 2017. 3. 25. · Protectors –Uses anti-debugging tricks to frustrate reversing. Packer Detection

License Applications. THE Who's Your Tailor? · 2003. 10. 17. · -—domestic or commercial. Let us shov them to you. Buy Welsbach, Mflnttes for brilliancy and durability. You, know

REMOTE CODE EXECUTION - ROOTCON 10/Talks/ROOTCON... · RCE – binary deserialization • Java contains a native serialization mechanism, that converts objects to binary data •

Demystifying a Malware Attack - ROOTCON 10/Talks/ROOTCON... · – Damballa – F-Secure – Trend Micro • @Tophs. Author of 2012 2015. Co-Author of 2016. Agenda • The Attack

folkways-media.si.edu · Shortly after flying Into Nev York from the Coast early in December, 1959, Brownle McGhee rehearsed and appeared in a television shov, bought extra sets of

Metasploit - ROOTCON™ Media Server 10/Trainings... · Metasploit Framework • One of the most popular open source penetration testing tools / frameworks the world has ever known

Android Reversing - ROOTCON

Potpisivanje PDF dokumenata - Aktiva 2001aktiva2001.rs/obrasci/Potpisivanje PDF dokumenata_BG.pdf · Može se čekirati opcija Do not shov this message again kako se ovaj prozor ubuduće

AUTHORS FR: MEN SHOV, V.A. TO: MERCIER, JULES · title: authors fr: men shov, v.a. to: mercier, jules subject: authors fr: men shov, v.a. to: mercier, jules keywords

 · M SHOV If 1M CIT/ Vrt? /Æt- fru / 00 -2/1 0041e,tJU — av0a- odt @ 3TO -u . A. I 11/ n/ I

· PDF filerelationship with fastfa-ktoriell section dy intesr—- closed and establish theix -Y tion 3 we study integrall;v- closed ACCD—donains and shov; AVID not necessari

IT Conference 2011 Virtualization A New Risk. @tikbalangph rootCON 6 @parklane international hotel, cebu city [2012 sept 7-8]

Methodology v2 The Bug Hunters - ROOTCON 11/Trainings/The Bug Hunters... · ★XXE v2.5. light reading. Discovery ++ Discovery Intro to scraping for subdomains Enumall (recon-ng,

ROOTCON 101

UNDERSTANDINGS ANDBOXES - ROOTCON 6/Talks/ROOTCON 6 - Understan… · s andboxes $ see+ $ $

Presented by: Morris D Fedeli ParklaneHotel, Cebu … 6/Talks/ROOTCON 6... · 2017. 3. 24. · Presented by: Morris D Fedeli ParklaneHotel, Cebu City, September 7 th 2012