masSEXploitation
Michael Brooks The Rook details michael Brooks "The Rook" - masSEXploitation This talk covers the use of chaining vulnerabilities in order to bypass layered security systems.
Summary
Architecture and Background
Michael Brooks "The Rook" - masSEXploitation This talk covers the use of chaining vulnerabilities in order to bypass layered security systems. This talk will also cover ways of obtaining wormable remote code execution on a modern LAMP platform.
Vulnerability Analysis
These attacks where developed by me, and they are very new. These attacks are as real as it gets, and the results are making the headlines.
Exploitation and Demonstrations
"Apocalyptic infection" -- The Register Michael Brooks: This will be my 3rd year in a row that I spoken at Defcon. According to the Department of Homeland Security I have found a vulnerability with a severity metric of 13.5 which makes it into the top 1,000 most dangerous of all time.
Remediation and Defensive Strategies
I am the top answerer of security questions on StackOverflow.com (The Rook). I actively hunt for vulnerabilities on a verity of platforms. I write exploit code and make it public. hack to live , live to hack For copies of the slides and additional materials please see the DEF CON 18 Archive here:
Related talks
Main Stage·13 min
Alexander Minozhenko
Alexander Minozhenko explores how to hack vmware vcenter server in 60 seconds at DEF CON 20, examining penetration-testing and practical defenses.
Main Stage·1 hr 5 min
Dan Kaminsky
Dan Kaminsky details black Ops Dan Kaminsky Chief Scientist, DKH If there's one thing we know, it's that we're doing it wrong.
Main Stage·41 min
Dustin Hoffman · Semon Rezchikov
Dustin Hoffman and Semon Rezchikov details busting the BARR: Tracking "Untrackable" Private Aircraft for Fun &Profit Dustin Hoffman President & Senior Engineer, Exigent Systems Inc.