[ mainpage :: register :: conference :: training :: the venue ]
[ capture the flag (CTF) :: hitb cinema :: lock picking village :: zone-h/hitb hacking challenge :: bzflag ]
[ call for papers (CFP) :: conference agenda :: sponsors :: press/media :: forum ]
[ conference kit (PDF) :: past conferences :: contact us ]

Conference Materials: http://conference.hitb.org/hitbsecconf2007kl/materials/

Official Photos: http://photos.hitb.org

Nathan McFeters (Senior Security Advisor, Ernst & Young Advanced Security Center)

Filed under: Main Page — Administrator @ 8:22 am

Presentation Title: Slipping Past The Firewall
Presentation Details:

Using a lethal combination of various client side attacks we’ll smash the same origin policy, punch our way through your firewall, and dropkick an Oracle database on your internal network (and we’re NOT talking about SQL Injection!). Although the sophistication of client side attacks has dramatically increased over the last few years, many in the security community continue to dismiss the true dangers of these attacks. These �non-believers� feel that client side attacks are simply limited to HTTP based attacks or �phishing� attacks against careless individuals. This talk will demonstrate some techniques used by attackers to establish a �staging point� on your internal network. This staging point will be used to conduct NON-HTTP based attacks against various services on YOUR internal network. Specific demonstrations include:

  • Slipping attacks past the Firewall
  • Establishing a �Staging Point� on the internal network through the use of malicious Java Applets.
  • Breaking the JVM Same Origin Policy.
  • Establishing a bi-directional control channel from the attacker to the internal Network.
  • Initiating a Full Connect port scan of a system on the internal network.
  • Attacking an SMTP server on the internal network.
  • Brute forcing the credentials for an Oracle database server located on the internal network.
  • Attacking an Oracle Database on the internal network, giving the remote attacker the ability to issue SQL queries DIRECTLY to your database via JDBC and read the responses.

    About Nathan

    Nathan McFeters is a Senior Security Advisor for Ernst & Young’s Advanced Security Center based out of Houston, TX. Nathan has performed web application, deep source code, Internet, Intranet, wireless, dial-up, and social engineering engagements for several clients in the Fortune 500 during his career at Ernst & Young and has served as the Engagement Manager for the ASC#s largest client, leading hundreds of web application reviews this year alone.

    Prior to taking the position with Ernst & Young, Nathan paid his way thru undergrad and graduate degrees at Western Michigan University by doing consulting work for Solstice Network Securities a company co-founded with Bryon Gloden of Arxan, focused on providing high-quality consulting work for clients in the Western Michigan area. Nathan has an undergraduate degree in Computer Science Theory and Analysis from Western Michigan University and a Master of Science Degree in Computer Science with an emphasis on Computer Security, also from Western Michigan University.

    ** Presenting with Billy Rios



  • Event Organizer


    Hack In The Box (M) Sdn. Bhd.

    Supported & Endorsed By


    Malaysian Communications and Multimedia Commission (MCMC)


    Malaysian Administrative Modernisation & Management Planning Unit

    Platinum Sponsors


    Microsoft Corporation

    Gold Sponsors


    SCANIT ME LLC

    Official Airline Partner


    Internet Bandwidth Sponsor


    Global Transit

    CTF Sponsor


    Scan Associates

    CTF Prize Sponsor


    Scan Associates

    Sponsor for Zone-H/HITB Hacking Challenge


    Ascendsys

    HITB Cinema Sponsor


    Avenuz Sdn. Bhd.

    Official Creation Station


    The Womb.com

    Our Speakers are Supported By


    F-Secure Corporation


    Arbor Networks


    Mediaservice.net


    Bellua Asia Pacific


    ERNW GmbH


    Mozilla Corporation


    Mu Security

    Supporting Media:

    Virus Bulletin

    Virus Bulletin (VB)

    InfoSec News

    (ISN) InfoSec News

    InfoSec News

    XAKEP (Russia)

    Insecure Magazine

    PHRACK Magazine

    Hakin9 Magazine

    Supporting Organizations


    Chaos Computer Club


    ISECOM - Insititue for Security and Open Methodologies


    ISACA


    IT Underground


    X-Focus China

    Zone-H Defacement Mirror


    Xatrix Security


    Special Interest Group in Security & Information InteGrity Singapore


    Syscan