PRNG Pwning Random Number Generators in PHP Applications
Explore advanced techniques for exploiting randomness vulnerabilities in PHP applications in this Black Hat USA 2012 conference talk. Delve into the predictability of password reset tokens and learn how attackers can compromise user accounts by predicting PHP core randomness generators. Discover a suite of novel tools and methods that surpass previously known attacks, capable of targeting all PHP core system PRNGs, even those protected by the Suhosin extension. Examine practical attack demonstrations on popular PHP applications like Mediawiki, Gallery, osCommerce, and Joomla, resulting in complete user account takeovers. While focused on PHP, understand how these principles apply to any system using weak randomness generators or low entropy sources. Gain insights into tools for exploiting randomness vulnerabilities and access exploits for vulnerable applications presented by security researchers George Argyros and Aggelos Kiayias.