Cardbus Bus-Mastering: 0Wning The Laptop (Build It!)

No ratings

Presented at ShmooCon 2006 by

This presentation will introduce an opensource verilog Cardbus controller as part of the OpenCiphers project which can allow an attacker to manipulate arbitrary memory on the PCI bus of a laptop that has cardbus. Code will be provided to allow FPGAs with on-board processors to read/write memory on the host machine in real-time opening many different attack vectors. Some topics that will be covered include: Locating and downloading passwords and secret keys in memory Unlocking screensavers Tracing and modifying execution flow Taking over other devices on the PCI bus Installing memory-based and firmware based trojans This talk will include demonstrations and will generate discussion of other useful applications of having a PCI co-processor such as: Forensics External policy verification and enforcement HIDS / virus detection OS and application debugging