160 likes | 287 Vues
This comprehensive guide, authored by Dan Griffin of JW Secure, delves into various tools and techniques for hacking Windows Vista Security. It covers the origins and functionalities of tools used in smart card fuzzing, cryptography, firewalls, and IPsec. The guide includes sample C/C++ code projects, free downloads, and detailed explanations of advanced topics like CNG, CMS, and Twofish algorithms. It aims to educate readers about the vulnerabilities in smart card middleware, firewalls, and network security protocols, while providing practical demos and resources.
E N D
Hacking Windows Vista Security Dan Griffin JW Secure, Inc.
Introduction • Who am I? • What are these tools and where did they come from?
Topic Summary • Sample code projects are C/C++ based & require Vista • Free downloads! • Topics: Smart Cards, Crypto, Firewall, IPsec
Hacking Smart Cards • Or, more specifically, fuzzing smart card middleware. • What’s fuzzing? • What’s a smart card? • What’s smart card middleware?
Smart Card Fuzzing Demo (Or, don’t trust everything your smart card tells you …)
Hacking Crypto • What’s CNG? • What’s CMS? • What’s Twofish? • Article link • http://blogs.msdn.com/onoj/archive/2007/05/10/windows-vista-security-series-adding-a-cipher-algorithm-to-windows-vista.aspx • Code download • http://download.microsoft.com/download/f/1/2/f12dbbb5-d164-4e7c-b42d-aaca3efb85dc/CNGSample.EXE
Crypto Demo (Or, now NSA can’t read my email ) (maybe …)
Hacking The Firewall • What’s a network firewall? • Article link • http://blogs.msdn.com/onoj/archive/2007/05/09/windows-vista-security-series-programming-the-windows-vista-firewall.aspx • Code download • http://download.microsoft.com/download/f/1/2/f12dbbb5-d164-4e7c-b42d-aaca3efb85dc/FirewallSample.exe
Hacking IPsec/Socket Extensions • What’s IPsec? • What’s “Winsock Secure Socket Extensions”? • Code download • http://download.microsoft.com/download/f/1/2/f12dbbb5-d164-4e7c-b42d-aaca3efb85dc/IPsecPingSample.EXE
IPsecPing Demo • (Co-developed with V6 Security, Inc.)
Questions? • Contact Info • Dan Griffin (dan@jwsecure.com) • Blog = http://www.jwsecure.com/dan/index.html