Week 49 In Review – 2015

Events Related

• 2015 – Talks – bsidesvienna.at

• Botconf 2015
  The first keynote slot was assigned to Margarita Louca from Europol: “Successful botnets takedowns: The good-cooperation part”. More precisely, it’s the EC3 (“European Cyber Crime Center“). This talk was flagged as “restricted” and not all information will be reported here.
  • Botconf 2015 Wrap-Up Day #1 – blog.rootshell.be
  • Botconf 2015 Wrap-Up Day #2 – blog.rootshell.be
  • Botconf 2015 Wrap-Up Day #3 – blog.rootshell.be

Techniques

• Easy File Sharing Web Server v7.2 – Remote SEH Buffer Overflow (DEP Bypass With ROP) – blog.knapsy.com
  So, off I went to exploit-db and, after some poking around in DoS and PoC section, I found an exploit that I thought of redesigning and improving – Easy File Sharing Web Server 7.2 – Remote SEH Based Overflow.

• jtagsploitation – github.com
  Scripts and examples for using JTAG debug tools to gain root access.

Tools

• hashcat – github.com
  Advanced CPU-based password recovery utility

Vulnerabilities

• One of the Largest Hacks Yet Exposes Data on Hundreds of Thousands of Kids – motherboard.vice.com
  The personal information of almost 5 million parents and more than 200,000 kids was exposed earlier this month after a hacker broke into the servers of a Chinese company that sells kids toys and gadgets, Motherboard has learned.