Главная
Study mode:
on
1
Intro
2
Agenda
3
Work From Home: The Industrial Version
4
Programmable Logic Controller
5
Remote Access Solution
6
Under the Hood: OpenVPN
7
OpenVPN Traffic
8
So What's the Problem?
9
Example to a Very Loose Backend Parser
10
But What About SOP and CORS?
11
Recap
12
OK. We Can Start VPN Tunnel, SO WHAT?
13
But the Config File Must Be Present on the Machine!
14
PerFact OpenVPN - Backend
15
Perfact OpenVPN - Architecture
16
Prepare Our Exploit - Step 1
17
HMS Networks
18
SEH 101
19
mbDIALUP launcher
Description:
Explore a critical vulnerability in industrial remote access solutions utilizing OpenVPN in this Hack in Paris conference talk. Delve into the intricacies of Work From Home setups in industrial environments, focusing on Programmable Logic Controllers and remote access solutions. Examine OpenVPN's inner workings and traffic patterns to uncover a significant security flaw that can lead to remote code execution on VPN clients. Learn about loose backend parsers, Same-Origin Policy (SOP), and Cross-Origin Resource Sharing (CORS) implications. Investigate the PerFact OpenVPN backend and architecture, and follow a step-by-step guide to prepare an exploit. Gain insights into HMS Networks, Structured Exception Handling (SEH), and the mbDIALUP launcher as part of this comprehensive analysis of industrial VPN security vulnerabilities.

All Roads Lead to OpenVPN Pwning Industrial Remote Access Clients - Sharon Brizinov - Hack in Paris - 2021

Hack in Paris
Add to list
0:00 / 0:00