We have the next set of selected talks being announced here. I am super excited
about the variety of applications we had this year. Here are some of the talks
we will have.
Title: From LoRa technology to deployment within Orange affiliates
Speakers: Franck L’Hereec and Albert Nguyen
Just deployed, the LoRa technology has already passed into the hands of hackers
who have analyzed the LoRaWAN protocol as well as the objects and gateways that
implement it. At Orange, Orange Labs’ security experts have therefore looked
into those issues, first to understand it better, and also ensure the network’s
deployment in optimal security conditions. Demonstration via the example of the
treatment of the security of an innovation project by Orange. During the
presentation we will present :
In various scenarios it might be helpful or even required to have a statically
compiled version of Nmap available. This applies to e.g. scenarios where only
limited user privileges are available and installing anything to the system
might not be desirable.
For such cases I’ve started to create recipes to build such binaries. Similar
projects are already available on GitHub, but there are several reasons why I
chose to create my own tools:
ERNW has a new baby, so please say “hello” to the new ERNW SecTools GmbH ;-).
But why another ERNW company? Short answer: Because we want to contribute to
changing the way how software is built today: insecure, focused on profit and
sometimes made by people who ignore lessons from history. So how can we
contribute in this space? Start changing it ;-).
Confucius said: “The man who moves a mountain begins by carrying away small
stones” and that’s our way to go. It is not about building error free or
unbreakable software, it is about changing the way how software is built today,
about improving security and about raising the bar.
Our new workshop about
TLS/SSL in the enterprise
will be held for the 1st time at Troopers 2018. So I would like to take the
opportunity and post a short teaser about stuff we will cover in this workshop.
TLS/SSL is a complicated topic especially in enterprise environments due to the
fact, that
encrypted traffic should be inspected e.g. for malware
customers/users must be able to use important applications
crypto attacks are complex and sometimes considered to be only a problem in
theory
the internal CERT wants to have every issue fixed, if feasible or not 😉
impact of configuration changes can not be foreseen
Software inventory is incomplete (do you want to make a bet that Heartbleed is
fixed completely in your environment ;-)? )
… and so forth
In the workshop we will cover all these points, discuss them and share our
experience regarding feasibility and useful mitigating controls. We will explain
the most common SSL vulnerabilities/attacks, demonstrate tools to test (and
sometimes to exploit) them, point out pitfalls and recommend what to do. Let us
have a look at one example, Heartbleed:
During years, many different researches and attacks against digital and physical
payment methods have been discussed. New security techniques and methodologies
such as tokenization process attempts to reduce or prevent fraudulent
transactions.
Extracting or capturing data from a transaction have been studied in different
ways, and some of the most common techniques are skimming, wireless skimming,
relay attacks,
traffic sniffing or
modifying a PoS(Point of Sale)
system. In our talk,
“NFC Payments: The Art of Relay & Replay Attacks”
at TROOPERS18, we will discuss a new technique and
methodology that malicious individuals could implement to extract data.
The first time I’ve heard about RFID was at high school, back in 2002, when I
was studying Electronics. Back in that time, this technology was like some sort
of black magic to me. A few years later in 2011, our government in Argentina
decided to implement a “new technology” called NFC, designed as the new and only
way of payment for the use of public transport. So, I decided to understand it
better, play with it, and try some hacks I heard from the cool people of the
CCC.
In this article, we describe the impact of the increased use of Docker in
corporate environments on forensic investigations and incident analysis. Even
though Docker is being used more and more (Portworx, Inc., 2017), the
implications of the changed runtime environment for forensic processes and tools
have barely been considered. We describe the technological basics of Docker and,
based on them, outline the differences that occur with respect to digital
evidence and previously used methods for evidence acquisition. Specifically, we
look at digital evidence within a Docker container which are lost or need to be
acquired in different ways compared to a classical virtual machine, and what new
traces and opportunities arise from Docker itself.
If you attack someone, they will defend themselves, but if you tickle them, they
will eventually crack open. This surprisingly applies to Android apps as well!
Therefore, I created AndroTickler, not to test apps against certain attacks or
examine them for specific vulnerabilities, which developers would learn to
avoid. However, it helps pentesters to analyze and test apps in their own style,
but in a faster, easier and more flexible way. AndroTickler is a
Swiss-Army-Knife pentesting tool for Android apps. It provides information
gathering, static and dynamic analysis features, and also automates actions that
pentesters frequently do and highly need during their pentests. In addition, it
makes use of the powerful Frida to hook to the app and manipulate it in
real-time.
We have a short update from the TelcoSecDay 2018 Agenda. But before that, a
short reminder. The CFP for TelcoSecDay 2018 is still open. If you are into
telco research, and if you have something interesting to talk, please make a
submission here. The deadline is 17th
February 2018.
Here are the first two confirmed speakers who are going to talk about the below
mentioned topics:
Title: Data Security for 4G Interconnection and 5G Interconnection Risk
Areas
Here is a short blog post that explains how you can make your own
Man-in-the-Middle (MitM) setup for sniffing the traffic between a SIM card and
the backend server. This is** NOT a new research** but I hope this will help
anyone who doesn’t have a telco background to get started to play with mobile
data sniffing and fake base stations. This is applicable to many scenarios today
as we have so many IoT devices with SIM cards in it that connects to the
backend.
In this particular case, I am explaining the simplest scenario where the SIM
card is working with 2G and GPRS. You can probably expect me with more articles
with 3G, 4G MitM in future. But lets stick to 2G and GPRS for now.