Over The Router, Through The Firewall, To Grandmaâs House We Go.

No ratings

Presented at Blackhat USA 1999 by

Eric Schultze

George Kurtz

This will be a cross-platform hack demonstration taking everyone over a router, through a firewall and into the corporate jewels. The demonstration setup will use 6 NT-Unix hosts, one router and one firewall. Three to four video projectors will help walk everyone through each node in the attack. Methods will be presented which an attacker may use to circumvent traditional security models or exploit common security misconfigurations in a DMZ-Firewall environment. Specific attacks will be demonstrated in a mixed Unix ö NT environment, including: *Exploiting NT: information enumeration via the NT resource kit. *Exploiting Unix: hacking root via ttdb. *Circumventing router filtering. *Authenticating to an NT host from an NT host using only the password hash. *Hijacking the GUI ö ãBack Orifice for NTä *Exploiting common misconfigurations of packet inspection firewalls. *Performing reverse telnets through the firewall. *20 uses for netcat. *Hacking NT from Unix. *Trojans, sniffers and streamed file execution for NT ö the ãadminkit for NTä Several intrusion detection systems will be running in default configurations to detect these attacks (yeah, right). After demonstrating the cross-platform hack through the router and firewall to the internal network, we will spend the balance of the presentation discussing mechanisms that can be used to help deter these types of attacks. Eric Schultze is a Senior Manager in the Information Security Services practice of Ernst ? Young. Based out of Seattle, Washington, he is a national resource and serves as the firmâs subject matter expert for securing Windows NT and Microsoft BackOffice applications. Eric has over 8 years of experience in information systems and security.