OpenBSD Remote Exploit
Alfredo Ortega, exploit writer, Core Security Technologies
This presentation examines one of the few known remote exploits for the OpenBSD operating system. Ortega will describe how the exploit’s shellcode disables OpenBSD defenses and installs a user-mode process. Other possible techniques for exploiting OpenBSD will also be discussed.
Date: August 1, 2007
Location: Caesars Palace, Las Vegas, NV
Timing Attacks for Recovering Private Entries from Database Engines
Ariel Waissbein, researcher, Core Security Technologies
Pablo Damian Saura, developer and researcher at CoreLabs, a division of Core Security Technologies
Dynamic content for web applications – including registration information, credit card numbers, medical records and other private data – is typically managed through database engines. Web applications usually restrict users to certain queries from the database while safeguarding the privacy of other data. During this presentation, Wassbein and Saura will discuss a new timing attack that can retrieve data from private database columns. You’ll see the experiments that led CoreLabs to develop the code for this MySQL exploit, gain an understanding of the underlying algorithm, and learn how to detect and protect against the exploit.
Date: August 1, 2007
Location: Caesars Palace, Las Vegas, NV
A Dynamic Technique for Enhancing the Security and Privacy of Web Applications
Ezequiel D. Gutesman, researcher at CoreLabs, a division of Core Security Technologies
Ariel Waissbein, researcher, Core Security Technologies
Several protection techniques based on run-time taint analysis have been proposed over the past few years. Some provide fully automated protection for existing web applications, while others require human interaction, source code modification or special tuning. During this presentation, Gutesman and Wassbein will look at the pros and cons of each of these approaches. They will also introduce a new technique for dynamically identifying and blocking several attack vectors, including injection attacks, shell injection attacks, cross-site scripting attacks and directory-transversal attacks. The technique is viable for most web scripting languages – including PHP, ASP, Python, Perl and Java – and ultimately helps to protect the private data stored on a web application’s network.
Date: August 2, 2007
Location: Caesars Palace, Las Vegas, NV
