Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 66 guests and 1 member online
EH-Net News Feeds
Latest Additions
 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Hardwarearrow How an hardware is actually vulnerable to exploitation?
EH-Net
May 26, 2012, 12:54:39 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Advertise on EH-Net!! - Reasonable Rates, Highly Targeted Audience.
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: How an hardware is actually vulnerable to exploitation?  (Read 15121 times)
0 Members and 2 Guests are viewing this topic.
manoj9372
Jr. Member
**
Offline Offline

Posts: 61


View Profile
« on: September 30, 2010, 11:11:36 AM »

I am just new to these hardware hacking field,
I am just wondering about this field,How actually an hardware is subjected to exploitation?

In software we have incorrect handling of input in the source,so we get some buffer overflows and things,but i don't know what  bug's actually present inside the hardware for exploitation?

Also can a hardware exploit can get us remote code execution?

Need a bit of explanation to make my self-clear...


hope i will get some...
Logged
dante
Jr. Member
**
Offline Offline

Posts: 58



View Profile
« Reply #1 on: September 30, 2010, 01:49:02 PM »

Normally hardware hacking boils down to exploiting firmware, code embedded in chips etc... 
I have not seen messing with the hardware resulting in a vulnerable state until I read about geohot's glitching the memory bus hack... Though geohot's work was significant, in the end it was a heap overflow that opened the iron gates of PS3...

http://ps3wiki.lan.st/index.php/PSJailbreak_Exploit_Reverse_Engineering
Logged
tturner
Sr. Member
****
Offline Offline

Posts: 329


View Profile WWW
« Reply #2 on: November 23, 2010, 09:08:29 AM »

One of my recent faves is the jedi packet trick. Check out the CanSecWest 2010 presentation at http://www.alchemistowl.org/arrigo/Papers/Arrigo-Triulzi-CANSEC10-Project-Maux-III.pdf
Logged

Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GSEC, OPSE, CSWAE, VCP

Next 6 months: GCIH, CSTP, STI MSISE
taargus taargus
Newbie
*
Offline Offline

Posts: 15



View Profile
« Reply #3 on: July 14, 2011, 09:17:37 PM »

Ahh... hardware exploitation.  Take a look at Chris Tarnovsky's work.  This guy blows my mind.  Chemistry, precision mechanics, and code.  

http://www.youtube.com/watch?v=tnY7UVyaFiQ



PS - Didn't realize I dug up a rather old thread.  Sorry, mods.  
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.148 seconds with 21 queries.
 

gk_static-ad_feb2012.jpg
Global Knowledge: Build Security Skills to Protect & Defend

els_130x200fixed2.gif
eLearnSecurity Student Course Now Live!
5% Off with Code
ELS-EH-5

SANS Deals 4 EH-Netters
$150 OFF Any SANS Course in Any Format!
Coupon Code: EHN_Connect Including SANS Security West 2012 & SANSFIRE 2012
Recent Forum Topics

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!

Vote For EH-Net

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2012 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.