.

hackers hacking hackers?

<<

j0rDy

User avatar

Hero Member
Hero Member

Posts: 591

Joined: Tue Feb 23, 2010 4:55 am

Location: Netherlands

Post Wed Apr 21, 2010 8:03 am

hackers hacking hackers?

i found a paper from an ethical hacker that took the time to exploit the RAT tool Poison Ivy. Through reverse engineering he found a vulnerability in the populair remote access trojan tool making it vulnerable for a reverse connection. This gives the infected computer the ability to connect back to the server and take over his computer.

paper:
http://www.signal11.eu/en/research/articles/targeted_2010.pdf
CISSP, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
<<

Anquilas

User avatar

Full Member
Full Member

Posts: 169

Joined: Fri Mar 19, 2010 7:50 am

Location: Belgium

Post Wed Apr 21, 2010 8:09 am

Re: hackers hacking hackers?

Sounds like a nice way to take revenge ^^
Thanks for the link!
Twitter: https://twitter.com/dietervds
Blog: https://synquell.wordpress.com (not much there yet)

The beginning of knowledge is the discovery of something we do not understand.
<<

ziggy_567

User avatar

Sr. Member
Sr. Member

Posts: 378

Joined: Tue Dec 30, 2008 1:53 pm

Post Wed Apr 21, 2010 8:24 am

Re: hackers hacking hackers?

That's nothing new really. The "hacker underground" has been writing purposefully vulnerable exploits for some time now. It just goes to show you how important code review is! Hell, even Sony purposefully distributed malicious software!

Anyway, I remember reading "Hacking: The Next Generation" in chapter 7, there is an account of infiltrating a phishing group that had been distributing a phishing tool that had an obfuscated backdoor routine in it where all the people that clicked on the link actually sent the results back to the original author without the secondary phisher's knowlege as well as the secondary phisher.
--
Ziggy


eCPPT - GSEC - GCIH - GWAPT - GCUX - RHCE - SCSecA - Security+ - Network+
<<

j0rDy

User avatar

Hero Member
Hero Member

Posts: 591

Joined: Tue Feb 23, 2010 4:55 am

Location: Netherlands

Post Thu Apr 22, 2010 4:26 am

Re: hackers hacking hackers?

i know the concept isnt new, but i think its pretty big news considered the fact that Poison Ivy is a pretty well known RAT. i guess it takes a real distinctive mindset to write a hacker tool with security in mind ;D I agree on the code review part, but these tools arent written in any professional form, no development/test/acceptance/production system at hand or stuff like that.
CISSP, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net

Return to News from the Outside World

Who is online

Users browsing this forum: No registered users and 1 guest

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software