SlideShare ist ein Scribd-Unternehmen logo
1 von 51
Downloaden Sie, um offline zu lesen
Polyglottes binaireset
implications
SSTIC, Rennes, France
Ange Albertini 2013/06/05
Anglicismes
en approche
http://corkami.com
rétro-conception
&
documentations visuelles
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
le problème
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
récapitulons
Structure
1. début
○ Signature PE
i. %PDF + début d'objet
2. suite
○ PE (suite)
○ HTML
○ PDF (suite)
3. fin
○ ZIP
Polyglottes binaires et implications
ça manque de sel...
(et de plantages)
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
l'intérêt?
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Polyglottes binaires et implications
Faiblesses
● contourner
○ filtres → exfiltration
○ same origin policy
○ détection
■ ex: PE sain mais PDF/HTML/... malveillant
■ faire abandonner
■ déplacer la frontière sain <> corrompu
● déni de service
Conclusion
Conclusion
● la confusion de type, c'est le mal
○ les documentations succintes, aussi
○ les logiciels laxistes, pareil
● aller plus loin que la documentation
○ Adobe: bien / Sumatra: pas bien
● suggestions
○ + de contrôle sur les extensions
○ isolation des fichiers téléchargés
○ un type = une signature (longue) au dép. 0
Questions ?
Merci à VOUS !(et particulièrement à Olivier et Axel)
http://
reverseengineering.stackexchange.com
@angealbertini
✉ ange@corkami.com
rétroconception.échangedepile.fr ;)

Weitere ähnliche Inhalte

Mehr von Ange Albertini

An introduction to inkscape
An introduction to inkscapeAn introduction to inkscape
An introduction to inkscapeAnge Albertini
 
The challenges of file formats
The challenges of file formatsThe challenges of file formats
The challenges of file formatsAnge Albertini
 
Exploiting hash collisions
Exploiting hash collisionsExploiting hash collisions
Exploiting hash collisionsAnge Albertini
 
Connecting communities
Connecting communitiesConnecting communities
Connecting communitiesAnge Albertini
 
TASBot - the perfectionist
TASBot - the perfectionistTASBot - the perfectionist
TASBot - the perfectionistAnge Albertini
 
Caring for file formats
Caring for file formatsCaring for file formats
Caring for file formatsAnge Albertini
 
Trusting files (and their formats)
Trusting files (and their formats)Trusting files (and their formats)
Trusting files (and their formats)Ange Albertini
 
Let's write a PDF file
Let's write a PDF fileLet's write a PDF file
Let's write a PDF fileAnge Albertini
 
An overview of potential leaks via PDF
An overview of potential leaks via PDFAn overview of potential leaks via PDF
An overview of potential leaks via PDFAnge Albertini
 
Funky file formats - 31c3
Funky file formats - 31c3Funky file formats - 31c3
Funky file formats - 31c3Ange Albertini
 
Preserving arcade games - 31c3
Preserving arcade games -  31c3Preserving arcade games -  31c3
Preserving arcade games - 31c3Ange Albertini
 
Preserving arcade games
Preserving arcade gamesPreserving arcade games
Preserving arcade gamesAnge Albertini
 
Hide Android applications in images
Hide Android applications in imagesHide Android applications in images
Hide Android applications in imagesAnge Albertini
 

Mehr von Ange Albertini (20)

No more dumb hex!
No more dumb hex!No more dumb hex!
No more dumb hex!
 
Beyond your studies
Beyond your studiesBeyond your studies
Beyond your studies
 
An introduction to inkscape
An introduction to inkscapeAn introduction to inkscape
An introduction to inkscape
 
The challenges of file formats
The challenges of file formatsThe challenges of file formats
The challenges of file formats
 
Exploiting hash collisions
Exploiting hash collisionsExploiting hash collisions
Exploiting hash collisions
 
Infosec & failures
Infosec & failuresInfosec & failures
Infosec & failures
 
Connecting communities
Connecting communitiesConnecting communities
Connecting communities
 
TASBot - the perfectionist
TASBot - the perfectionistTASBot - the perfectionist
TASBot - the perfectionist
 
Caring for file formats
Caring for file formatsCaring for file formats
Caring for file formats
 
Hacks in video games
Hacks in video gamesHacks in video games
Hacks in video games
 
Trusting files (and their formats)
Trusting files (and their formats)Trusting files (and their formats)
Trusting files (and their formats)
 
Let's write a PDF file
Let's write a PDF fileLet's write a PDF file
Let's write a PDF file
 
PDF: myths vs facts
PDF: myths vs factsPDF: myths vs facts
PDF: myths vs facts
 
An overview of potential leaks via PDF
An overview of potential leaks via PDFAn overview of potential leaks via PDF
An overview of potential leaks via PDF
 
Advanced Pdf Tricks
Advanced Pdf TricksAdvanced Pdf Tricks
Advanced Pdf Tricks
 
Funky file formats - 31c3
Funky file formats - 31c3Funky file formats - 31c3
Funky file formats - 31c3
 
Preserving arcade games - 31c3
Preserving arcade games -  31c3Preserving arcade games -  31c3
Preserving arcade games - 31c3
 
Preserving arcade games
Preserving arcade gamesPreserving arcade games
Preserving arcade games
 
Let's talk about...
Let's talk about...Let's talk about...
Let's talk about...
 
Hide Android applications in images
Hide Android applications in imagesHide Android applications in images
Hide Android applications in images
 

Polyglottes binaires et implications