En esta entrada no vamos a hablar de los retos de matasano, aunque lo acabo de hacer :), sino de otra web: id0-rsa.pub.

Ésta, está en la misma onda que matasano, alberga una serie de retos orientados a la criptografía que tenemos que resolver con programación. Son retos enfocados al aprendizaje de la criptografía aplicada, por lo que no se necesitan conocimientos previos sobre dicho tema, pero sí se necesitan conocimientos de programación.

Ya podemos acceder al material de la edición de este año de Black Hat celebrada en Amsterdam.

• What Got Us Here Wont Get Us There eu-15-Meer-What-Got-Us-Here-Wont-Get-Us-There.pdf
• (In-)Security of Backend-As-A-Service eu-15-Rasthofer-In-Security-Of-Backend-As-A-Service.pdf eu-15-Rasthofer-In-Security-Of-Backend-As-A-Service-wp.pdf
• A Peek Under the Blue Coat eu-15-Rigo-A-Peek-Under-The-Blue-Coat.pdf
• All Your Root Checks Belong to Us: The Sad State of Root Detection
• AndroBugs Framework: An Android Application Security Vulnerability Scanner eu-15-Lin-Androbugs-Framework-An-Android-Application-Security-Vulnerability-Scanner.pdf
• Attacking the XNU Kernel in El Capitain eu-15-Todesco-Attacking-The-XNU-Kernal-In-El-Capitain.pdf
• Authenticator Leakage through Backup Channels on Android eu-15-Bai-Authenticator-Leakage-Through-Backup-Channels-On-Android.pdf
• Automating Linux Malware Analysis Using Limon Sandbox eu-15-KA-Automating-Linux-Malware-Analysis-Using-Limon-Sandbox.pdf eu-15-KA-Automating-Linux-Malware-Analysis-Using-Limon-Sandbox-wp.pdf
• Breaking Access Controls with BLEKey
• Bypassing Local Windows Authentication to Defeat Full Disk Encryption eu-15-Haken-Bypassing-Local-Windows-Authentication-To-Defeat-Full-Disk-Encryption.pdf eu-15-Haken-Bypassing-Local-Windows-Authentication-To-Defeat-Full-Disk-Encryption-wp.pdf
• Bypassing Self-Encrypting Drives (SED) in Enterprise Environments eu-15-Boteanu-Bypassing-Self-Encrypting-Drives-SED-In-Enterprise-Environments.pdf eu-15-Boteanu-Bypassing-Self-Encrypting-Drives-SED-In-Enterprise-Environments-wp.pdf
• Commix: Detecting and Exploiting Command Injection Flaws eu-15-Stasinopoulos-Commix-Detecting-And-Exploiting-Command-Injection-Flaws.pdf eu-15-Stasinopoulos-Commix-Detecting-And-Exploiting-Command-Injection-Flaws-wp.pdf
• Continuous Intrusion: Why CI tools are an Attackers Best Friends eu-15-Mittal-Continuous-Intrusion-Why-CI-Tools-Are-An-Attackers-Best-Friend.pdf
• Cybercrime in the Deep Web eu-15-Balduzzi-Cybercrmine-In-The-Deep-Web.pdf eu-15-Balduzzi-Cybercrmine-In-The-Deep-Web-wp.pdf
• Cybersecurity for Oil and Gas Industries: How Hackers Can Manipulate Oil Stocks eu-15-Polyakov-Cybersecurity-For-Oil-And-Gas-Industries-How-Hackers-Can-Manipulate-Oil-Stocks.pdf eu-15-Polyakov-Cybersecurity-For-Oil-And-Gas-Industries-How-Hackers-Can-Manipulate-Oil-Stocks-wp.pdf
• Defending Against Malicious Application Compatibility Shims eu-15-Pierce-Defending-Against-Malicious-Application-Compatibility-Shims.pdf eu-15-Pierce-Defending-Against-Malicious-Application-Compatibility-Shims-wp.pdf
• Even the LastPass Will be Stolen Deal with It! eu-15-Vigo-Even-The-Lastpass-Will-Be-Stolen-deal-with-it.pdf
• Exploiting Adobe Flash Player in the Era of Control Flow Guard eu-15-Falcon-Exploiting-Adobe-Flash-Player-In-The-Era-Of-Control-Flow-Guard.pdf
• Faux Disk Encryption: Realities of Secure Storage on Mobile Devices eu-15-Mayer-Faux-Disk-Encryption-Realities-Of-Secure-Storage-On-Mobile-Devices.pdf eu-15-Mayer-Faux-Disk-Encryption-Realities-Of-Secure-Storage-On-Mobile-Devices-wp.pdf
• Fuzzing Android: A Recipe for Uncovering Vulnerabilities Inside System Components in Android eu-15-Blanda-Fuzzing-Android-A-Recipe-For-Uncovering-Vulnerabilities-Inside-System-Components-In-Android.pdf eu-15-Blanda-Fuzzing-Android-A-Recipe-For-Uncovering-Vulnerabilities-Inside-System-Components-In-Android-wp.pdf
• Going AUTH the Rails on a Crazy Train eu-15-Jarmoc-Going-AUTH-The-Rails-On-A-Crazy-Train.pdf eu-15-Jarmoc-Going-AUTH-The-Rails-On-A-Crazy-Train-wp.pdf
• Hey Man Have You Forgotten to Initialize Your Memory? eu-15-Chen-Hey-Man-Have-You-Forgotten-To-Initialize-Your-Memory.pdf eu-15-Chen-Hey-Man-Have-You-Forgotten-To-Initialize-Your-Memory-wp.pdf
• Hiding in Plain Sight - Advances in Malware Covert Communication Channels eu-15-Bureau-Hiding-In-Plain-Sight-Advances-In-Malware-Covert-Communication-Channels.pdf eu-15-Bureau-Hiding-In-Plain-Sight-Advances-In-Malware-Covert-Communication-Channels-wp.pdf
• How to Break XML Encryption - Automatically eu-15-Somorovsky-How-To-Break-XML-Encryption-Automatically-wp.pdf
• Implementing Practical Electrical Glitching Attacks
• Is Your TimeSpace Safe? - Time and Position Spoofing Opensourcely eu-15-Kang-Is-Your-Timespace-Safe-Time-And-Position-Spoofing-Opensourcely.pdf eu-15-Kang-Is-Your-Timespace-Safe-Time-And-Position-Spoofing-Opensourcely-wp.pdf
• Lessons from Defending the Indefensible eu-15-Majkowski-Lessons-From-Defending-The-Indefensible.pdf
• Locknote: Conclusions and Key Takeaways from Black Hat Europe 2015
• LTE & IMSI Catcher Myths eu-15-Borgaonkar-LTE-And-IMSI-Catcher-Myths.pdf eu-15-Borgaonkar-LTE-And-IMSI-Catcher-Myths-wp.pdf
• New (and Newly-Changed) Fully Qualified Domain Names: A View of Worldwide Changes to the Internets DNS eu-15-Vixie-New-And-Newly-Changed-Fully-Qualified-Domain-Names-A-View-Of-Worldwide-Changes-To-The-Internets-DNS.pdf
• New Tool for Discovering Flash Player 0-day Attacks in the Wild from Various Channels eu-15-Pi-New-Tool-For-Discovering-Flash-Player-0-day-Attacks-In-The-Wild-From-Various-Channels.pdf eu-15-Pi-New-Tool-For-Discovering-Flash-Player-0-day-Attacks-In-The-Wild-From-Various-Channels-wp.pdf
• Panel: What You Need to Know About the Changing Regulatory Landscape in Information Security
• Self-Driving and Connected Cars: Fooling Sensors and Tracking Drivers eu-15-Petit-Self-Driving-And-Connected-Cars-Fooling-Sensors-And-Tracking-Drivers.pdf eu-15-Petit-Self-Driving-And-Connected-Cars-Fooling-Sensors-And-Tracking-Drivers-wp1.pdf eu-15-Petit-Self-Driving-And-Connected-Cars-Fooling-Sensors-And-Tracking-Drivers-wp2.pdf
• Silently Breaking ASLR in the Cloud eu-15-Barresi-Silently-Breaking-ASLR-In-The-Cloud.pdf eu-15-Barresi-Silently-Breaking-ASLR-In-The-Cloud-wp.pdf
• Stegosploit - Exploit Delivery with Steganography and Polyglots eu-15-Shah-Stegosploit-Exploit-Delivery-With-Steganography-And-Polyglots.pdf
• Triaging Crashes with Backward Taint Analysis for ARM Architecture eu-15-Kim-Triaging-Crashes-With-Backward-Taint-Analysis-For-ARM-Architecture.pdf
• Unboxing the White-Box: Practical Attacks Against Obfuscated Ciphers eu-15-Sanfelix-Unboxing-The-White-Box-Practical-Attacks-Against-Obfuscated-Ciphers.pdf eu-15-Sanfelix-Unboxing-The-White-Box-Practical-Attacks-Against-Obfuscated-Ciphers-wp.pdf
• VoIP Wars: Destroying Jar Jar Lync eu-15-Ozavci-VoIP-Wars-Destroying-Jar-Jar-Lync.pdf
• Vulnerability Exploitation in Docker Container Environments eu-15-Bettini-Vulnerability-Exploitation-In-Docker-Container-Environments.pdf eu-15-Bettini-Vulnerability-Exploitation-In-Docker-Container-Environments-wp.pdf
• Watching the Watchdog: Protecting Kerberos Authentication with Network Monitoring eu-15-Beery-Watching-The-Watchdog-Protecting-Kerberos-Authentication-With-Network-Monitoring.pdf eu-15-Beery-Watching-The-Watchdog-Protecting-Kerberos-Authentication-With-Network-Monitoring-wp.pdf
• Your Scripts in My Page - What Could Possibly Go Wrong?

Dennis Yurichev, autor del libro Ingeniería inversa para principiantes ha ido creando una serie retos y ejercicios sobre dicho tema que iba publicando en su blog (algunos también están en el libro) y para poner un poco de orden ha creado un sitio web nuevo llamado challenges.re, dónde ha reagrupado y organizado dichos retos.

Aunque en su blog actual ha ido publicando las soluciones a los retos que creaba, en este nuevo sitio no las va a publicar y por consiguiente, tampoco publicará las soluciones de futuros retos ni en dicha web ni en el blog. Además pide que no se publiquen las soluciones en sitios públicos: blogs, foros, etc.

Linux.Encoder.1 es un ransomware (malware que “rapta”/encripta tus ficheros y que chantajea de forma económica típicamente si quieres recuperar tus datos) que está siendo noticia últimamente. No porque este tipo de malware sea nuevo, sino porque parece ser que es el primero (que se sepa hasta la fecha) que ataca sistemas Linux.

Éste concretamente se aprovecha de una vulnerabilidad en Magento, un carrito de la compra electrónico. Una vez dentro de tu sistema, Linux.Encoder.1 busca los directorios /home, /root y/var/lib/mysql, y encripta su contenido usando AES, un algoritmo de clave simétrica. Dicha clave luego es encriptada con RSA. Una vez hecho esto, el malware empieza a encriptar el directprio raíz (/), excluyendo algunos ficheros críticos.

Los sistemas de 8-bits siempre me han llamado la atención, entre otras cosas porque resultan muy fácil de entender en comparación con arquitecturas actuales y porque, no sé, tienen su encanto.

Como ya he dicho muchas veces, no hay nada mejor que aprender jugando, o en este caso creando un juego. Este es el material de un curso sobre el desarrollo de juegos para la consola de vídeo juegos más exitosa de su época (mediados - finales de los 80s), la NES de Nintendo.

La cantidad de tecnología con la que un desarrollador tiene que lidiar hoy en día es agobiante. El tener a mano la documentación necesaria en cualquier momento, conectado a internet o no, es esencial, sobre todo en el segundo de los casos.

Son muchos los lenguajes, frameworks, etc que proveen de una API con acceso a la documentación del mismo (o de terceros), de forma que permite a los propios desarrolladores, crear herramientas o funcionalidades que hagan uso de dichas APIs.

Aquí tenéis la lista de las presentaciones que se han publicados de Ruxcon 2015:

• DNS as a Defense Vector
• High Performance Fuzzing
• The New South Wales iVote System: Security Failures and Verification Flaws in a Live Online Election
• MalwAirDrop: Compromising iDevices via AirDrop
• Broadcasting Your Attack: Security Testing DAB Radio In Cars
• Windows 10: 2 Steps Forward, 1 Step Back
• Practical Intel SMEP Bypass Techniques on Linux
• Advanced SOHO Router Exploitation
• Why Attacker's Toolsets Do What They Do
• SDN Security
• Window Driver Attack Surface: Some New Insights
• Abusing Adobe Reader¹s JavaScript APIs
• High-Def Fuzzing: Exploring Vulnerabilities in HDMI-CEC
• VoIP Wars: Destroying Jar Jar Lync
• VENOM
• Fruit Salad, yummy yummy: An analysis of ApplePay
• A Peek Under The Blue Coat
• Automated Malware Analysis: A Behavioural Approach to Automated Unpacking
• Tasty Malware Analysis with T.A.C.O.: Bringing Cuckoo Reports into IDA Pro
• A Practical Robust Mitigation and Testing Tool for Use-After-Free Vulnerabilities
• Testing TLS - How To Check If Your TLS Implementation Is Correct
• Microarchitecture Independent VM Introspection

Ya está disponible el material (vídeos y diapositivas) de SecTor 2015.

• Maturing InfoSec: Lessons from Aviation on Information Sharing - Slides
• Automation is your Friend: Embracing SkyNet to Scale Cloud Security - Video
• Breaking Access Controls with BLEKey - Video
• Breaking and Fixing Python Applications - Video Slides Tools
• Complete Application Ownage via Multi-POST XSRF - Video
• Confessions of a Professional Cyber Stalker - Video
• Cymon - An Open Threat Intelligence System - Video
• Data-Driven Threat Intelligence: Metrics on Indicator Dissemination and Sharing - Slides
• Hijacking Arbitrary .NET Application Control Flow - Video Slides
• Malware Activity in Mobile Networks – An Insider View - Video Slides
• Software Defined Networking / Attacker Defined Networking - Video
• Stealth Attack From The Produce Aisle - Slides
• Stealthier Attacks and Smarter Defending with TLS Fingerprinting - Video Slides
• UNMASKING MALWARE - Video
• Xenophobia is Hard on Data: Forced Localization, Data Storage, and Business Realities - Video
• Bulletproofing Your Incident Response Plan: Effective Tabletops - Video
• CISO Survival Guide: How to thrive in the C-Suite and Boardroom - Slides
• Make Metrics Matter - Slides
• The Effective Use of Cyber Ranges for Application Performance and Security Resilience – Train Like You Fight! - Video
• There’s no such thing as a coincidence - Discovering Novel Cyber Threats - Video
• Building an Effective Vulnerability & Remediation Management Program - Video
• Ground Zero Financial Services: Targeted Attacks from the Darknet - Video
• Peeling The Layers Of Vawtrak - Slides
• Preventing Home Automation Security Disasters - Video Slides
• Run Faster, Continuously Harden - Embracing DevOps to Secure All The Things - Video
• Security for non-Unicorns - Video
• Certifi-gate: Has your Android device been Pwned? - Video
• Effective Ways to Tackle Vulnerability Remediation - Video
• Knowing what happened is only half the battle. - Video
• SIEM and the Art of Log Management - Video Slides

Desde la remota tierra de Moldova , pasando por el Brasil metropolitano, hasta el Massachusetts suburbano, CODEGIRL sigue a equipos de chicas de secundaria alrededor del mundo que tienen tres meses para crear una aplicación que resuelva los problemas en sus comunidades. El equipo ganador recibirá 10 mil dólares si termina su aplicación, pero cada chica descubre algo valioso por el camino.

Ha sido publicado el material de la Hack In The Box de Singapur de este año 2015:

• CLOSING NOTE - Dhillon Kannabhiran.pdf
• D1 - Alfonso De Gregorio - Extortion and Cooperation in the Zero%c2%ad-Day Market.pdf
• D1 - Chris Rouland - Understanding the IoT from DC to 10Ghz.pdf
• D1 - Dawid Czagan - Hacking Cookies in Modern Web Applications and Browsers.pdf
• D1 - Julien Lenoir - Implementing Your Own Generic Unpacker.pdf
• D1 - Lyon Yang - Advanced SOHO Router Exploitation.pdf
• D1 - Marina Krotofil - Hacking Chemical Plants for Competition and Extortion.pdf
• D2 - Eleanor Saitta - Security Design and High Risk Users.pdf
• D2 - Fatih Ozavci - VoIP Wars - Destroying Jar Jar Lync.pdf
• D2 - Marco Balduzzi and Vincenzo Ciancaglini - Cybercrime in the Deep Web.pdf
• D2 - Ryan Welton and Marco Grassi - Current State of Android Privilege Escalation.pdf
• D2 - Valerie Thomas - Attacking Physical Access Systems.pdf
• D2 - Xeno Kovah - Thunderstrike 2 - Sith Strike.pdf
• D3 - Dmitry Chastuhin - SAP Afaria - One SMS to Hack a Company.pdf
• D3 - Felix Wilhelm - Attacking the FireEye MPS.pdf
• D3 - Katie Kleemola and Anthony Lai - Case Study of Targeted Attacks in Asia.pdf
• D3 - Marc Heuse - Hiding in Complexity.pdf
• D3 - Wen Xu - Root Hundreds and Thousands of Android Devices with One Generic Exploit.pdf
• KEYNOTE 1 - Kristin Lovejoy - Our Daily Struggle to Balance National Security Interests and Civil Liberties at the Ground Level .pdf
• KEYNOTE 2 - Ofir Arkin - Security in a World Out of Our Control - NO SLIDES.pdf
• KEYNOTE 3 - Winn Schwartau - Analogue Network Security.pdf
• KEYNOTE 4 (CLOSING) - Barry Greene - Can Vendors Ever Provide Secure Solutions%3f.pdf

Whitepapers:

• Alfonso De Gregorio - Extortion and Cooperation in the Zero%c2%ad-Day Market.pdf
• Dawid Czagan - Hacking Cookies in Modern Web Applications and Browsers.pdf
• Marco Balduzzi and Vincenzo Ciancaglini - Cybercrime In The DeepWeb.pdf
• Wen Xu - Root Hundreds and Thousands of Android Devices with One Generic Exploit.pdf
• Xeno Kovah - Thunderstrike 2 - Sith Strike.pdf