SELECT code_execution FROM * USING SQLite;

OmerGull Main Security Playlists: '36c3' videos starting here / audio SQLite is one of the most deployed software in the world. However, from a security perspective, it has only...
SELECT code_execution FROM * USING SQLite;


OmerGull

Main
Safety
Playlists:
’36c3′ videos starting right here
/
audio

SQLite is one in every of per chance the most deployed device within the arena. Nonetheless, from a security perspective, it has ultimate been examined throughout the slender lens of WebSQL and browser exploitation. We deem that right here is engrossing the tip of the iceberg.


In our prolonged race examine, we experimented with the exploitation of memory corruption problems internal SQLite with out relying on any ambiance as opposed to the SQL language. The utilization of our innovative techniques of Inquire Hijacking and Inquire Oriented Programming, we proved it is feasible to reliably exploit memory corruptions problems within the SQLite engine. We instruct these techniques just a few staunch-world eventualities: pwning a password stealer backend server, and reaching iOS persistency with better privileges.

Each person is conscious of that databases are the crown jewels from a hacker’s point of gaze, but what whilst you are going to also use a database as the hacking tool itself? We came across that merely querying a malicious SQLite database – can lead to Far away Code Execution. We aged undocumented SQLite3 habits and memory corruption vulnerabilities to take serve of the assumption that querying a database is gain.

How? We created a rogue SQLite database that exploits the device aged to starting up it.Exploring ultimate just a number of the possibilities this gifts we’ll pwn password stealer backends whereas they parse credentials recordsdata and build iOS persistency by changing its Contacts database…

The panorama is never at all times the truth is-ending (Hint: Did someone train Home windows 10 0-day?). That is amazingly unpleasant since SQLite3 is now almost built-in to any standard device.

In our talk we moreover discuss the SQLite internals and our original plot for abusing them. We needed to assemble our have confidence ROP chain technique the use of nothing but SQL CREATE statements. We aged JOIN statements for Heap Spray and SELECT subqueries for x64 pointer unpacking and arithmetics. It be a original world of the use of the acquainted Structured Inquire Language for exploitation primitives,laying the foundations for a generic leverage of memory corruption problems in database engines.

Discover

These recordsdata comprise loads of languages.

This Talk changed into once translated into loads of languages. The recordsdata on hand
for download comprise all languages as separate audio-tracks. Most
desktop video players can mean it is most likely you’ll per chance per chance own between them.

Please learn about for “audio tracks” in your desktop video participant.

Tags

Be taught More

Categories
Internet of Things
59 Comments on this post.
  • Douglascep
    30 November 2020 at 10:10 am
  • Brianrog
    3 December 2020 at 7:57 am
  • Brianrog
    3 December 2020 at 4:04 pm
  • Brianrog
    3 December 2020 at 11:52 pm

    does viagra or cialis help with pe cialis cialis pills for sale

  • Brianrog
    4 December 2020 at 8:17 am

    when will cialis go generic cialis cialis pills for sale

  • Brianrog
    4 December 2020 at 7:13 pm
  • PhilipBaill
    7 December 2020 at 5:19 am
  • PhilipBaill
    7 December 2020 at 1:46 pm
  • DanielJaf
    10 December 2020 at 1:34 am
  • DanielJaf
    10 December 2020 at 9:54 am
  • DanielJaf
    10 December 2020 at 6:00 pm
  • DanielJaf
    11 December 2020 at 2:05 am
  • DanielJaf
    11 December 2020 at 9:59 am
  • DanielJaf
    11 December 2020 at 6:11 pm
  • Alleninefs
    12 December 2020 at 12:34 pm
  • Alleninefs
    12 December 2020 at 8:26 pm
  • Alleninefs
    13 December 2020 at 4:39 am
  • WilfredNib
    15 December 2020 at 1:46 pm
  • WilfredNib
    15 December 2020 at 10:33 pm
  • WilfredNib
    16 December 2020 at 10:36 am

    erection pills ed meds rx best erectile dysfunction medication

  • WilfredNib
    16 December 2020 at 10:34 pm
  • HaroldJam
    17 December 2020 at 5:25 pm
  • HaroldJam
    18 December 2020 at 5:26 am
  • HaroldJam
    18 December 2020 at 5:08 pm
  • HaroldJam
    19 December 2020 at 5:18 am

    cialis going generic in 2019 in us cheap cialis generic cialis tadalafil

  • HaroldJam
    19 December 2020 at 5:25 pm
  • HaroldJam
    20 December 2020 at 5:27 am
  • HaroldJam
    20 December 2020 at 5:19 pm
  • HaroldJam
    21 December 2020 at 5:00 am
  • IsaacPex
    21 December 2020 at 6:42 pm
  • IsaacPex
    22 December 2020 at 6:22 am
  • IsaacPex
    22 December 2020 at 6:39 pm
  • Johnnypauct
    23 December 2020 at 10:54 pm
  • Johnnypauct
    24 December 2020 at 11:27 am
  • Johnnypauct
    25 December 2020 at 12:08 am
  • Johnnypauct
    25 December 2020 at 12:43 pm
  • Johnnypauct
    26 December 2020 at 1:20 am
  • Jamesber
    30 December 2020 at 1:58 am
  • Jamesber
    30 December 2020 at 7:10 pm
  • Jamesber
    31 December 2020 at 12:22 pm
  • Jamesber
    1 January 2021 at 5:36 am
  • Jamesber
    1 January 2021 at 10:59 pm
  • GeorgeItaTs
    3 January 2021 at 11:32 pm
  • GeorgeItaTs
    4 January 2021 at 5:06 pm
  • Nllpreete
    10 January 2021 at 6:00 pm
  • Fgvdreete
    11 January 2021 at 12:51 pm
  • DavidApose
    12 January 2021 at 5:30 am
  • JlloMoume
    12 January 2021 at 9:31 am

    my canadian pharmacy dysfunction best drugstore setting spray

  • Lokuhaify
    13 January 2021 at 7:49 am

    pharmacy in canada pharmacy canadian pharmacy reviews

  • DavidApose
    13 January 2021 at 10:00 am
  • Khthcory
    13 January 2021 at 10:41 am
  • Jtmfhaify
    13 January 2021 at 12:41 pm
  • DavidDausy
    15 January 2021 at 11:28 pm
  • DavidDausy
    16 January 2021 at 11:20 pm
  • Robertfom
    18 January 2021 at 5:05 am
  • Nlbxreete
    19 January 2021 at 10:27 pm

    cialis online without viagra vs cialis cialis deliver next day [url=http://cialijomen.com/]viagra or cialis[/url] ’

  • Michaelwer
    20 January 2021 at 8:42 am

    interactions for cialis cialis generic uuqkjinq how long does 20mg cialis keep in system

  • Fbdhreete
    20 January 2021 at 4:57 pm

    cialis asia buy generic cialis cialis online canada paypal [url=http://21cialismen.com/]original cialis[/url] ’

  • JvcbxMoume
    21 January 2021 at 8:09 am

    generic cialis 30 pills 20mg generic cialis mastercard is generic cialis from india safe [url=http://phrcialiled.com/]cheapest cialis 20mg[/url] ’

  • Leave a Reply

    *

    *

    RELATED BY