Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Denis Makrushin - DeanonymizaTOR

Avatar for DC7499 DC7499
May 22, 2015
Research
0
100

Denis Makrushin - DeanonymizaTOR

DEFCON Moscow 8

Avatar for DC7499

DC7499

May 22, 2015
Tweet

More Decks by DC7499

See All by DC7499
Sergey Sobko - Hackashop: Hackathon + Pentest + Workshop [RU]
Avatar for DC7499 defcon
0
540
Dmitry Sklyarov - Intel ME: Security keys Genealogy, Obfuscation and other Magic
Avatar for DC7499 defcon
0
270
Anton Lopanitsyn - Initial reconnaissance of web applications.
Avatar for DC7499 defcon
0
300
Dmitry Volkov - Private messengers: without pain??
Avatar for DC7499 defcon
1
240
Andrey Skuratov and Sergey Migalin - DNS tunneling in 2018. What is that, and what to do with it?
Avatar for DC7499 defcon
2
210
Sergey Belov - Another side of Bug Bounty programs
Avatar for DC7499 defcon
0
300
Dmitry Sklyarov - Intel ME: Flash file system explained
Avatar for DC7499 defcon
0
530
Maxim Goryachiy & Mark Ermolov - Inside Intel Management Engine
Avatar for DC7499 defcon
0
610
Sergey Golovanov - Indecent Response 2018
Avatar for DC7499 defcon
0
530

Other Decks in Research

See All in Research
Remote sensing × Multi-modal meta survey
Avatar for SatAI.challenge satai
4
500
cvpaper.challenge 10年の軌跡 / cvpaper.challenge a decade-long journey
Avatar for gatheluck gatheluck
3
350
投資戦略202508
Avatar for Pragmaworks pw
0
570
Nullspace MPC
Avatar for MizuhoAOKI mizuhoaoki
1
210
電通総研の生成AI・エージェントの取り組み エンジニアリング業務向けAI活用事例紹介
Avatar for AITC - DENTSU SOKEN isidaitc
1
1.1k
Mamba-in-Mamba: Centralized Mamba-Cross-Scan in Tokenized Mamba Model for Hyperspectral Image Classification
Avatar for SatAI.challenge satai
3
110
Creation and environmental applications of 15-year daily inundation and vegetation maps for Siberia by integrating satellite and meteorological datasets
Avatar for SatAI.challenge satai
3
400
Combinatorial Search with Generators
Avatar for Keisuke Okumura | 奥村圭祐 kei18
0
1k
長期・短期メモリを活用したエージェントの個別最適化
Avatar for AITC - DENTSU SOKEN isidaitc
0
190
論文紹介: ReGenesis: LLMs can Grow into Reasoning Generalists via Self-Improvement
Avatar for Hisao Katsumi hisaokatsumi
0
110
音声感情認識技術の進展と展望
Avatar for Ryotaro Nagase nagase
0
280
Mechanistic Interpretability：解釈可能性研究の新たな潮流
Avatar for Koshiro Aoki koshiro_aoki
1
470

Featured

See All Featured
[RailsConf 2023] Rails as a piece of cake
Avatar for Vladimir Dementyev palkan
57
5.9k
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
Avatar for Marc Duiker marcduiker
34
2.3k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
Avatar for Dan Newman danielanewman
230
22k
Making the Leap to Tech Lead
Avatar for Ryan Cromwell cromwellryan
135
9.6k
Into the Great Unknown - MozCon
Avatar for Noah Learner thekraken
40
2.1k
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
Avatar for Tammy Everts tammyeverts
55
3k
The Cost Of JavaScript in 2023
Avatar for Addy Osmani addyosmani
55
9k
VelocityConf: Rendering Performance Case Studies
Avatar for Addy Osmani addyosmani
332
24k
The Art of Programming - Codeland 2020
Avatar for Erika Heidi erikaheidi
56
14k
Speed Design
Avatar for Sergey Chernyshev sergeychernyshev
32
1.2k
10 Git Anti Patterns You Should be Aware of
Avatar for Lemi Orhan Ergin lemiorhan
PRO
657
61k
Chrome DevTools: State of the Union 2024 - Debugging React & Beyond
Avatar for Addy Osmani addyosmani
9
910

Transcript

  1. Немного лирики…

  2. DeanonymizaTOR Denis Makrushin (@difezza) Maria Garnaeva Global Research and Analysis

    Team

  3. «Я знаю что ты делал прошлым летом»

  4. … но как?!

  5. Эксплойты, фингерпринтинг… ну-ну- да.

  6. Flash, html5, entry-node detection… ну- ну-да.

  7. Но КАК … … они нашли мой мегаприватный-0дей-форум?! … они

    нашли мою квартиру?!

  8. ПАССИВНАЯ СИСТЕМА СБОРА ДАННЫХ … ИЛИ КАК ОНИ НАШЛИ МОЙ

    МЕГАПРИВАТНЫЙ-0ДЕЙ-ФОРУМ?!

  9. >> ExitPolicy accept *:*

  10. >>tshark –i 1 –w dump.pcap

  11. Психологический портрет tor- пользователя

  12. Психологический портрет. Часть 2.

  13. 13

  14. 14

  15. АКТИВНАЯ СИСТЕМА СБОРА ДАННЫХ … ИЛИ КТО СТУЧИТСЯ В ДВЕРЬ

    КО МНЕ?!

  16. Traffic injection… ну-ну-да.

  17. Скажи мне, кто ты

  18. Такие разные печеньки

  19. None

  20. ТЕМ ВРЕМЕНЕМ В TBB

  21. А ДАВАЙТЕ ТЕКСТ ПОМЕРЯЕМ

  22. Measuretext

  23. Proof-of-concept: готовим пациента

  24. Proof-of-concept: делаем укольчик

  25. СПОЙЛЕР: НЕ ТОЛЬКО MEASURETEXT ТУТ БЫЛ PHDAYS V

  26. СПОЙЛЕР: АНАЛИЗИРУЕМ РЕЗУЛЬТАТ ТУТ БЫЛ PHDAYS V

  27. XSS – головная боль onion-ресурсов

  28. Вектор атаки

  29. None
  30. None
  31. None

  32. Wazzzzup?! twitter.com/difezza [email protected]