ESC16-Contenuti
From Enter the ESC
HOME WIKI | PROPOSTE | CAMPEGGIO | CALL FOR PAPER | ARRIVARE | FAQ | MATERIALI |
![]() |
![]() |
Contents |
Proposte
![]() |
Lista Talk
T1601 : PHP backdoor obfuscation: the rise of the vuln - guly
Backdooring the web is the cheapest and most hidden way to achieve persistence on a compromised network, both if you're looking at privileges on the webapp itself or at executing command to underlying system.
During the talk, we will discuss the context of a web backdoor: the environment where she can born and grow up will be defined. Each environmental aspect will be thoroughly analyzed: where is the best point of injection, why we choose a specific function or trick, what permissions are needed, how to trigger the backdoor in a safe, hidden and reproducible way, and of course what to inject.
The talk will thus present several ways to inject obfuscated and hard to spot vulnerabilities in PHP code. Shown examples will backdoor CMS plugins as well as custom code, altering the code and polluting the webapp ecosystem (read: DBMS and webservers).
T1602 : Titolo - (autore/i)
...breve abstract...
Lista Caps
C1601 : Titolo - (autore/i)
...breve abstract...
Lista Labs
L1601 : Titolo - (referente)
...breve abstract...
Ville
HAM VILLE - (fabioFVZ - IW3FVZ)
Se sei un Radioamatore...questa e' la tua zona :)
Quest'anno parteciperemo ai seguenti Contest:
- Field Day IARU 1 HF SSB - Regolamento: http://fieldday.it
- Contest VHF INTERNATIONAL IARU REG.1 - Regolamento: http://www.ari.it/contestVHF
Quindi saremo attivi dalle HF alle VHF.
Maggiori info prossimamente...
Ti aspettiamo...
- - . . . . . - - -
73 de IW3FVZ
Programma
Il programma definitivo con gli orari sara' disponibile da agosto.