Security SAKURA #04 Lightning Talk

by Keiichiro

Slide 1

Slide 1 text

૊ΈࠐΈ੡඼ʹؔ͢ΔηΩϡϦςΟ ৘ใՈిʹજΉڴҖͱରࡦ Kei Yoshimura @9SQ

Slide 2

Slide 2 text

૊ΈࠐΈ੡඼ʢ৘ใՈిʣ ωοτϫʔΫ ઀ଓ •ςϨϏ •ϧʔλ •HDDϨίʔμʔ •ϓϦϯλ

Slide 3

Slide 3 text

૊ΈࠐΈ੡඼Ͱͦ͜ݟ௚͢΂͖ηΩϡϦςΟ ύιίϯʹे෼ͳηΩϡϦςΟରࡦΛ͍ͯ͠ͳ͍ͱ... →΢Πϧε΍Ϛϧ΢ΣΞʹײછ͢ΔՄೳੑ →Ճ֐ऀʹͳͬͯ͠·͏ՄೳੑʢbotԽʣ ૊ΈࠐΈ੡඼͸ηΩϡϦςΟରࡦ͠ͳ͍͍ͯ͘ͷʂʁ

Slide 4

Slide 4 text

૊ΈࠐΈ੡඼͕ऑ఺ΛؚΉཧ༝ اըஈ֊ ։ൃஈ֊ ӡ༻ ഇغॲ෼ اըॻ౳ͷྲྀग़ ࢓༷ͷෆ۩߹ ੬ऑੑΛؚΉ γεςϜͷઃܭ ΫϥοΩϯά ϦόʔεΤϯδχΞϦϯά ࢒ཹ৘ใͷ࿙Ӯ

Slide 5

Slide 5 text

૊ΈࠐΈ੡඼ͷෆ۩߹Λमਖ਼͢Δํ๏ • ΠϯλʔωοτΛܦ༝ͨ͠ϑΝʔϜ΢ΣΞΞοϓσʔτ ʢࣗಈɾखಈʣ • ੡඼Λճऩ͠ɺमਖ਼ޙʹฦ٫

Slide 6

Slide 6 text

৘ใՈిʹߟ͑ΒΕΔڴҖ • ֎෦͔Βͷෆਖ਼ΞΫηεɺͦΕʹ൐͏৘ใྲྀग़ ྫɿωοτϫʔΫΧϝϥɺNAS • ߈ܸͷ౿Έ୆ʹ͞ΕΔ(Anonymous ProxyͳͲ) ྫɿHDDϨίʔμʔɺ ແઢLANΞΫηεϙΠϯτ

Slide 7

Slide 7 text

৘ใՈి͕ڴҖͱͳΔཧ༝ ػث༝དྷ • γεςϜͷߴੑೳԽɺߴػೳԽʹΑΔ൥ࡶԽ • ૊ΈࠐΈػثͷಛ௃ʢىಈ࣌ؒɾଈԠੑʣ ਓత༝དྷ • ؆ུԽ͗ͨ͢͠ػثͷઃఆ • ϢʔβʔͷϦςϥγʔΛݟࠐΊͳ͍

Slide 8

Slide 8 text

࣮ࡍͷྫ ωοτϫʔΫΧϝϥ આ໌ॻ௨ΓʹDDNS౳ͷઃఆΛ͢Δͱ ՈͷதΛωοτʹେެ։ͯ͠͠·͏Մೳੑ → ؆ུԽ͠ա͗ͨઆ໌ɺઃఆɺϢʔβͷϦςϥγʔ HDDϨίʔμʔ Πϯλʔωοτʹ઀ଓͰ͖ΔHDDϨίʔμʔͰ Anonymous Proxyͱͯ͠ಈ࡞͢Δ੬ऑੑ →ߴੑೳԽɺߴػೳԽɺৗ࣌ిݯONͳͲ

Slide 9

Slide 9 text

૊ΈࠐΈ੡඼ͷղੳ

Slide 10

Slide 10 text

૊ΈࠐΈ੡඼͕ऑ఺ΛؚΉཧ༝ اըஈ֊ ։ൃஈ֊ ӡ༻ ഇغॲ෼ اըॻ౳ͷྲྀग़ ࢓༷ͷෆ۩߹ ੬ऑੑΛؚΉ γεςϜͷઃܭ ΫϥοΩϯά ϦόʔεΤϯδχΞϦϯά ࢒ཹ৘ใͷ࿙Ӯ

Slide 11

Slide 11 text

ղੳख๏ • ੡඼ʹ৮Εͳ͍ղੳख๏ ϒϥ΢βܦ༝ͷઃఆը໘ telnetɺSSH • ੡඼ʹ৮ΕΔղੳख๏ γϦΞϧ઀ଓɺJTAG ճ࿏ύλʔϯղੳɺ৴߸ղੳ

Slide 12

Slide 12 text

੡඼ʹ৮ΕΔղੳख๏ • γϦΞϧίϯιʔϧ(UART͔Βͷ৴߸ΛಡΉ) Universal Asynchronous Receiver Transmitter ػث಺෦ͷ৘ใు͖ग़͠ ຊདྷෆՄࢹʹͳ͍ͬͯΔઃఆͷมߋͳͲ • JTAG ICE Joint Test Action Group In-Circuit Emulator ։ൃࢧԉ༻ɺό΢ϯμϦεΩϟϯςετ༻ ϑΝʔϜ΢ΣΞٵ͍ग़͠ɾॻ͖ࠐΈɺϝϞϦμϯϓͳͲ

Slide 13

Slide 13 text

γϦΞϧίϯιʔϧʹΑΔղੳ ϓϥωοΫεࣾ੡ ؆қNASɹMZK-USBSV

Slide 14

Slide 14 text

੡඼ͷ෼ղ ੡඼಺෦ʢࠨɿදɺӈɿཪʣ

Slide 15

Slide 15 text

ςετύου

Slide 16

Slide 16 text

ϒϩοΫਤ͔ΒγεςϜߏ੒Λ֬ೝ͢Δ webެ։൛ʹ͖ͭσʔλඇެ։

Slide 17

Slide 17 text

ύιίϯͰಡΉํ๏ FT232RL USBγϦΞϧม׵Ϟδϡʔϧ ळ݄ిࢠ௨঎ʹͯ1ݸ950ԁ ಡΈग़͠ͱॻ͖ग़͠ͷҝʹ TXDɺRXDɺGNDΛ઀ଓ

Slide 18

Slide 18 text

ϒʔτϩʔμʔͱγεςϜ্ཱ͕ͪΓ webެ։൛ʹ͖ͭσʔλඇެ։

Slide 19

Slide 19 text

੡඼ʹखΛ৮Εͳ͍ղੳख๏ ձ৔ʹ͍Βͬ͠ΌΔํʑʹ͓೚ͤ͠·͢(ŧŽŕ (ͨͿΜ๻ΑΓ΋ৄ͍͠ͱࢥ͏ͷͰ)

Slide 20

Slide 20 text

·ͱΊ • ҙ֎ͱʮݹయతͳ੬ऑੑʯΛؚΉػث͸ଟ͍ → ͋ͳͨͷ஌Βͳ͍ͱ͜ΖͰ... • ιϑτ΢ΣΞͷकඋ͸ສશͰ΋ʁ → ੡඼ʹ৮ΕΒΕͨΒݏͳػث͸ϋʔυ΢ΣΞతʹؙࠊͷՄೳੑ

Slide 21

Slide 21 text

૊ΈࠐΈ੡඼ͷ੬ऑੑΛݮΒ͢ख๏ اըஈ֊ ։ൃஈ֊ ӡ༻ ഇغॲ෼ ΨΠυϥΠϯ ࣾ಺పఈ ηΩϡΞ ϓϩάϥϛϯά ߈ܸ଱ੑ ଱λϯύੑ ഇغํ๏ͷݕ౼

Slide 22

Slide 22 text

੬ऑੑͷൃݟΛݟӽͨ͠ઃܭɺରԠ • ੬ऑੑͷใࠂ ʙ 0-day߈ܸ ʙ ࣮߈ܸ → Ϣʔβʹର͢Δࠂ஌ɺ੬ऑੑ΁ͷૣظରԠΛͰ͖Δମ੍ • ϑΝʔϜ΢ΣΞɾΞοϓσʔτ → ϢʔβͷϦςϥγʔΛݟӽͨ͠γεςϜઃܭʢࣗಈΞοϓσʔτͳͲʣ

Slide 23

Slide 23 text

ઃܭஈ֊Ͱͷ߈ܸ଱ੑͷߟྀ • ύιίϯಉ༷ͷ࢓૊ΈΛಋೖ͢Δ → DEP(σʔλ࣮ߦ๷ࢭ)ʹΑΔόοϑΝΦʔόʔϑϩʔରࡦ → ASLR(ΞυϨεۭؒ഑ஔͷϥϯμϜԽ)ʹΑΔෆਖ਼ͳίʔυͷ࣮ߦ๷ࢭ • ෆඞཁͳ৘ใ͸Ӆ͢ → ج൘্ʹ࣮૷͞Εͨνοϓͷܕ൪Λ൑ಡෆೳʹ͢Δ → ෺ཧతΞΫηεखஈΛઈͭ (BGAͷ࠾༻ɺςετύουΛ࢒͞ͳ͍)