Hacking 50 millions users using 123456 - Himanshu Shamra & Aman Sachdev - leHACK 2019

123456 for hacking 50 millions users ! Talk to leHACK 2019 Paris !

The talk will revolve around a 200day+ hack authorised by a VC on its investments as a black box red teaming where we will show some interesting business logic bypasses on payment gateways etc, patching well known tools to return more juice, bland server misconfiguration case studies, network hopping, pivoting, escalations, SQL data exfiltration and many other techniques that led us to the data of over 6 firms under the VC housing ~50 Million users. Bonus case studies collected when red-teaming a billion dollar pharmaceutical firm including the testing of Scientific Data Management Systems and Electronic Lab Notebooks where we could, in fact, reconfigure chemical formulas and sampling devices. Our journey of Pre-GDPR Carnage as red-teamers with a license to kill.

#lehack #hacking #paris

[gruzzyhdeux]

Dans cette conf y'a des noms + prénoms et des credentials sur une des slides qui ont été omis, ptet tenter de les cacher ???

[runguy]

yeeeah les conférences de leHack! les autres vont arriver?