Evilgrade.pdf

(1938 KB) Pobierz

Francisco Amato

evilgrade,

"You have pending upgrades..."

http://www.infobyte.com.ar

Introduction

Topics

Client side explotation

Update process

Poor implementation of update processes

Attack vectors

evilgrade framework presentation

http://www.infobyte.com.ar

Introduction

Client side explotation

Searching the Weakest Link

Bypassing the fortress walls

This technique allows for example transform a user

terminal in a “proxy” to access the internal network

of a company

http://www.infobyte.com.ar

General application’s update process

How does it works?

Update process are either manual or

automatic.

The process requests a special file in the

master server for example

update.application.

com/info.xml

The file has the internal information of the

available updates.

It’s installed automatic or ask if you like to

install the new update.

http://www.infobyte.com.ar

What’s the problem?

http://www.infobyte.com.ar