Wednesday
Room 1
17:40 - 18:40
(UTC+01)
Talk (60 min)
Flipping Bits: Your Credentials Are Certainly Mine
Did you know that if you change a single bit from 1 to 0 (or vice versa) in the first 'g' of the domain name google.com (which is 01100111 in binary) you will end up with variety of valid "bitflip" domains like coogle.com, oogle.com, & woogle.com
So what happens if you generate and register a bunch of cheap bitflipped versions of popular cloud / Saas provider domains, point them to your VPS, log all incoming requests & then forget about the whole thing for two years?
Well you will in fact receive a stiff bill, generate huge log files and eventually run out of disk space. But on the upside, you will also have collected a treasure trove of legit credentials & interesting stuff like valid OAuth refresh tokens, JWT tokens, bearers, cookies, emails, meeting invites with passwords & truckloads of internet scanner noise.
In this session we will revisit bit-flip research from the last decade and weaponize it. Showcase 'Certainly' a pioneering offensive / defensive tool that employs Wildcard DNS matching & on-the-fly generated SSL certificates and injects custom payloads for incoming requests across various protocols. All with the intention to downgrade security, harvest credentials, capture emails and replacing dependencies.
Stök ·
STÖK operates at the crossroads of cybersecurity & creativity. With Swedish roots, STÖK has carved out a distinctive niche as a creative, hacker, keynote speaker and cybersecurity professional. His curiosity and dedication to sharing what he learned shines through his robust online community. His creative presentation style and hacker insights have graced the main stages of globally recognized cybersecurity events such as Black Hat USA, DEF CON, Securityfest, SEC-T, Disobey, and EKO PARTY, further establishing his influence in the community.
Diving into cybersecurity in the early '90s, STÖK has pioneered a holistic approach, harmonizing defensive strategies with an aggressive hacker's mindset. However, his expertise extends beyond the digital frontier, incorporating a keen understanding of human psychology, marketing, fashion, and effective communication, reflecting his multifaceted interests and talents.
STÖK embodies a lifestyle where technology meets creativity, adopting a positive, forward-thinking stance on security and life. His ethos, captured in the empowering slogans "HACKERS GONNA HACK. CREATORS GONNA CREATE. GOOD VIBES ONLY," strikes a chord with his audience, injecting a vibrant, optimistic outlook into the complex cybersecurity landscape.
Joona Hoikkala
Joona is a seasoned hacker with over two decades of experience in the fields of software development and information security. He is recognized for his significant contributions to the open-source community, notably his work on acme-dns, ffuf, and certbot.
During days he works to secure hundreds of applications as the Head of Security Testing at Visma