Section: .. / hitb05 /
 Talks and presentations given at Hack In The Box 2005.
|
| /// File Name: |
BT-Anthony-Zboralski-Social-Enginee..> |
Description:
|
Social Engineering Fundamentals - In today's world confidence scams present quite possibly the highest threat to security with in the business world. Control of information, withholding and leaking, can lead to massive failures and losses depending on how skilled the attacker may be. In combination with disinformation and propaganda, social engineering can as fatal as or even lead to loss of customer and shareholder confidence.
| | Author: | Anthony Zboralski. | | File Size: | 1087163 | | Last Modified: | Oct 11 07:30:49 2005 |
| MD5 Checksum: | 2d7f286604dd4f2d30a75cb94ea92b55 |
|
| /// File Name: |
BT-Fabrice-Marie-Hacking-Internet-B..> |
Description:
|
Hacking Internet Banking Applications - This presentation highlights the solutions to some of the challenges the banks will face online to ensure that their data handling practices are compliant with their country's privacy regulations and banking regulations among others.
| | Author: | Fabrice Marie | | File Size: | 1150797 | | Last Modified: | Oct 11 07:30:49 2005 |
| MD5 Checksum: | 12e6750c604b2b31ec66cfd52f458650 |
|
| /// File Name: |
BT-Raoul-Chiesa-X25-Security.pdf |
Description:
|
x.25 Security - The presentation focuses on X.25 security issues, positioned in present day context and problems. The main intention is to bring personal and professional know-how, background and X.25 penetration testing experiences to the auditorium, with real-life case studies.
| | Author: | Raoul Chiesa | | File Size: | 1054769 | | Last Modified: | Oct 11 07:30:49 2005 |
| MD5 Checksum: | c4037d2cf2e9a67ae9543bede33f8ab4 |
|
| /// File Name: |
BT-Roberto-Preatoni-Fabio-Ghioni-Co..> |
Description:
|
Corp vs Corp - An impressionistic overview of what makes the difference today and in the future (in the digital playground) in the balance of power between economic and military powers. The presentation covers a description of the business behind espionage worldwide as well as the asymmetric organizations that are the real master of puppets.
| | File Size: | 7456768 | | Last Modified: | Oct 11 07:30:49 2005 |
| MD5 Checksum: | 404050140964f470d6fbac32d2008666 |
|
| /// File Name: |
BT-Tim-Pritlove-Blinkenlights-Arcad..> |
Description:
|
Project Blinkenlights - A presentation covering the Blinkenlights light installation in Berlin, Germany and the Arcade project in Paris, France.
| | Author: | Tim Pritlove | | File Size: | 5283891 | | Last Modified: | Oct 11 07:30:49 2005 |
| MD5 Checksum: | 9e978ff1a415ff4871efc2cdc881a0b7 |
|
| /// File Name: |
HITB.gif |
Description:
|
Conference Graphic
| | File Size: | 14408 | | Last Modified: | Oct 11 07:37:07 2005 |
| MD5 Checksum: | 8776d287de80d53c3bc6f5dc1bd42886 |
|
| /// File Name: |
Keynote-Mikko-Hypponen-Mobile-Malwa..> |
Description:
|
Mobile Malware - How exactly do mobile viruses work? We'll have a look at their code and discuss what factors affect their spreading speeds. Virus writers have always been trying to attack new platforms. What draws them now towards the mobile phone? Are phones as a platform simply widespread enough, or is the possibility of making easy money via phone billing systems driving this development? Where are we now and what can we expect to see in the Mobile Malware of the future?
| | Author: | Mikko Hypponen | | File Size: | 3635898 | | Last Modified: | Oct 11 07:31:03 2005 |
| MD5 Checksum: | e8e8675e736ec885672012e4e8eb5568 |
|
| /// File Name: |
Keynote-Tony-Chor-IE-Security-Past-..> |
Description:
|
IE Security - Past, Present and Future. Tony Chor outlines the threats to secure browsing, discuss Microsoft's response with Internet Explorer for Windows XP SP2, and details the implementation of safety features in the upcoming Internet Explorer 7.0, such as the Phishing Filter and Protected Mode (the feature formerly known as Low Rights IE).
| | Author: | Tony Chor | | File Size: | 5095936 | | Last Modified: | Oct 12 09:16:41 2005 |
| MD5 Checksum: | 8f19551be380c374c1c18f9f5e5b13a2 |
|
| /// File Name: |
TT-Dave-Aitel-Nematodes.sxi |
Description:
|
Nematodes (Beneficial Worms) - This presentation presents concepts for taking expoitation frameworks into the next evolution: solving complex security problems by generating robustly controllable beneficial worms. The Why, How, and What of Nematode creation are discussed, along with some concepts in Mesh routing. Problems discussed include legal issues, controlling your worm, writing an intermediate language, the Nematode Intermediate Language (NIL) for writing robust worms, reliability problems, commications protocols, and future work.
| | Author: | Dave Aitel | | File Size: | 63263 | | Last Modified: | Oct 11 07:30:55 2005 |
| MD5 Checksum: | e42fc288392a06c2255e543ec15ac8e2 |
|
| /// File Name: |
TT-Fyodor-Yarochkin-Meder-Kydyralie..> |
Description:
|
STIFWare Evolution - Meder and Fyodor have been working on their concept of common framework to unify offensive part of heterogeneous security data and security tools into a single unit - security tools framework. The presentation deals with the evolution of STIF framework into what they call now STIF-ware - a set of STIF relevant modules that would allow the computer security hobbists to build, control and monitor the distributed network of automated hacking agents, guided by set of goals and targets, assigned to the system.
| | Author: | Fyodor Yarochkin,Meder Kydyraliev | | File Size: | 488960 | | Last Modified: | Oct 11 07:30:55 2005 |
| MD5 Checksum: | 93c0368ab202f180e215595c59b87ec4 |
|
| /// File Name: |
TT-Jim-Geovedi-Hotspot-Security.pdf |
Description:
|
Hotspot Security - This presentation covers the basic approach behind Wi-Fi hotspot security design and architecture. During the presentation, vulnerabilities and methods for exploiting Wi-Fi hotspots were shown.
| | Author: | Jim Geovedi | | File Size: | 789596 | | Last Modified: | Oct 11 07:30:55 2005 |
| MD5 Checksum: | ce74e4cac2e465a1ab89c4389fd2dd31 |
|
| /// File Name: |
TT-Joanna-Rutkowska-HITB-Virginity-..> |
Description:
|
Virginity Verifier - The presentation aims towards defining a detailed list of vital operating system parts as well as a methodology for malware detection. The list will start on such basic levels as actions needed for file system and registry integrity verification, go through user-mode memory validating (detecting additional processes, hooked DLLs, injected threads, etc) and finally end on such advanced topics as defining vital kernel parts which can be altered by modern rootkit-based malware (with techniques like Raw IRP hooking, various DKOM based manipulations or VMM cheating)
| | Author: | Joanna Rutkowska | | File Size: | 540672 | | Last Modified: | Oct 11 07:30:55 2005 |
| MD5 Checksum: | c0d3fdb2f21dc50d92bece6f7137a264 |
|
| /// File Name: |
TT-Jose-Nazario-Analyzing-all-that-..> |
Description:
|
Analysing All That Data - This presentation will introduce you to a number of techniques for making sense of large collections of data, including sorting and clustering techniques, fuzzy matching, and trend analysis. These techniques have applicability in numerous applications, such as mail filtering and network event analysis.
| | Author: | Dr. Jose Nazario | | File Size: | 806318 | | Last Modified: | Oct 11 07:30:55 2005 |
| MD5 Checksum: | d0829aff0164819389729794a757c132 |
|
| /// File Name: |
TT-Marc-Schoenefeld-Secure-Java-Pro..> |
Description:
|
Secure Java Programming - The talk is about the causes and effects of coding errors and the techniques to detect them, demonstrated with findings in the current Sun JDK.
| | Author: | Marc Schoenefeld | | File Size: | 3309584 | | Last Modified: | Oct 11 07:30:55 2005 |
| MD5 Checksum: | e4012f9e73716a6dda8711b642802f41 |
|
| /// File Name: |
TT-Nish-Bhalla-Defects-Overview.pdf |
Description:
|
Analyzing Code for Security Defects - Reviewing code to find vulnerabilities is becoming more and more common. Reviewing code is not only useful from a developers point of view but also from an attacker's point of view. The talk covers the basics of threat analysis, how to assess threats and what are some of the vulnerabilities that could exists in code when performing code reviews for large code bases.
| | Author: | Nish Bhalla | | File Size: | 614892 | | Last Modified: | Oct 11 07:30:55 2005 |
| MD5 Checksum: | 01ce931ebd63e42db8084feb7021aefd |
|
| /// File Name: |
TT-Roelof-Temmingh-State-of-the-art..> |
Description:
|
Assessing Server Security - State of the Art. The talk takes into consideration the progress that has been made in web server security over the last few years, and the progress that has been made in attacking web servers over the same time. The paper visits the new vulnerabilities introduced by web applications and discuss the thinking applied to discover such vulnerabilities. It finally describes the state of the art of web server scanning technology.
| | Author: | Roelof Temmingh | | File Size: | 2585600 | | Last Modified: | Oct 12 09:14:31 2005 |
| MD5 Checksum: | 230a5f551f758a401bbb1186a0dce00d |
|
| /// File Name: |
TT-San-Hacking-Windows-CE.ppt |
Description:
|
Hacking Windows CE - This paper shows a buffer overflow exploitation example in Windows CE. It covers knowledge about the ARM architecture, memory management and the features of processes and threads of Windows CE. It also shows how to write a shellcode in Windows CE including knowledge about decoding shellcode of Windows CE.
| | Author: | San (XFocus) | | File Size: | 900096 | | Last Modified: | Oct 12 09:14:31 2005 |
| MD5 Checksum: | 6c73f84fe23ec9bb3d1ac4c919629d96 |
|
| /// File Name: |
TT-Shreeraj-Shah-Webhacking-Kungfu...> |
Description:
|
Web Hacking Kung-Fu and Art of Defense - Web attacks are on the rise and new methods of hacking are evolving. This presentation covers the new methodologies for web application footprinting, discovery and information gathering with a new range of tools.
| | Author: | Shreeraj Shah | | File Size: | 294031 | | Last Modified: | Oct 11 07:30:55 2005 |
| MD5 Checksum: | 17e8afa0c717088cac1ff757c5e00bb9 |
|
| /// File Name: |
TT-The-Grugq-VoIPPhreaking.ppt |
Description:
|
VoIPhreaking: How to make free phone calls and influence people This talk explores the technologies behind VoIP infrastructures, focusing on their weaknesses and faults. LIVE DEMOS were conducted to help illustrate that attacks which violate VoIP system security are not only practical, but are already here. The era of VoIPhreaking has begun.
| | Author: | The Grugq | | File Size: | 133632 | | Last Modified: | Oct 11 07:30:55 2005 |
| MD5 Checksum: | 4ce7dd9dcf877bd5c4c198a4a627e961 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
