歡迎來到 HITCON 2021 HITCON 官方網站 [target=_blank] 議程表 [target=_blank] 11/26 08:00 ~ 09:10 報到時間 09:10 ~ 09:30 嘉賓致詞 & Opening 09:30 ~ 09:55 活動介紹 Keynote

{%hackmd @HITCON/r1z4zylVv %} 從這開始 Power Oil and Gas Manufacturing Medical who led the the digital transformation of your company

{%hackmd @HITCON/r1z4zylVv %} 從這開始 The operation name came from: Agenda AD Farm Webshell

NAS：網路附加儲存裝置，現今會加儲存裝置。 但目前由於Open Source 所以風險增高 CVE 每個CVE編號會應對唯一漏洞 CWE 漏洞的root Cause 分類標準 CVSSv3 攻擊向量AV

{%hackmd @HITCON/r1z4zylVv %} 從這開始 國內DVR DDoS事件分析 icatch - icatch99(blogspot) 已曝險裝置 Shodan/Censys

{%hackmd @HITCON/r1z4zylVv %} 從這開始 背景介紹 拿報稅系統做健保卡和自然人憑證做實名驗證機制 健保卡 C/C++/wss (websocket over TLS) ActiveX/COM，讓 IE 可以直接在script 內使用

{%hackmd @HITCON/r1z4zylVv %} 從這開始 50 CVEs in 50 days: Fuzzing Adobe Reader Finding keywords Github keyword:CVE, and review tracker Exploit DB Crbug

{%hackmd @HITCON/r1z4zylVv %} 從這開始 slide:https://hitcon.org/2020/slides/How%20I%20Hacked%20Facebook%20Again!.pdf 按讚訂閱分享小鈴鐺 首次駭客攻擊MDM https://www.ithome.com.tw/news/137386

{%hackmd @HITCON/r1z4zylVv %} 從這開始 motivation one communication channels are syping on out data motivation two communication channels are modifying our data literal meaning of crytography secret writing achieves various security goals by ... cryptography with symmetric keys

{%hackmd @HITCON/r1z4zylVv %} 從這開始 After trade war, Taiwan should replace china in information security industrial. UCCU hack in gym format:uid:serial m:

{%hackmd @HITCON/r1z4zylVv %} 從這開始 DEERAN Router 4G LTE wireless router with one module for two SIM ... action="log/in" //PUBLIC Key on github

{%hackmd @HITCON/r1z4zylVv %} 從這開始 agenda security mechanisms in 4Glte rogue bs attacks signaling spoofing attack containerization and orchestration demo and expreimental results

{%hackmd @HITCON/r1z4zylVv %} 從這開始 Medical Device Security Medical devices definition in Europe Depend on their uses Possible harm to patients

{%hackmd @HITCON/r1z4zylVv %} 從這開始 Introduction SMB:windows共享檔案的協定 445 port MS17-010 WannaCry+永恆之藍

{%hackmd @HITCON/r1z4zylVv %} 從這開始 who am i - Lays senior researcher at TeamT5 focus on reverse engineering vulnerability research ... Angenda

{%hackmd @HITCON/r1z4zylVv %} 從這開始 TeamT5 Attack APT and Botnet Case Studies BlackTech Uodate Interception

{%hackmd @HITCON/r1z4zylVv %} 從這開始

{%hackmd @HITCON/r1z4zylVv %} 從這開始 Logic errors are ignored, but easier to find Attack surface (nmap) Web server, nginx (80/8080/8098/8099) DNS (53)

{%hackmd @HITCON/r1z4zylVv %} 從這開始 Declaration e-ID 窩不知道 Distribution (地圖分佈)

{%hackmd @HITCON/r1z4zylVv %} 從這開始 2013 年以前 Synology 沒有專門的資安團隊，幾乎都是靠客戶反饋要求修復漏洞。 發生 Synolocker 勒索病毒 (已經是很久以前的漏洞)，以及挖礦病毒，因此 2016 年開始成立對應的 BU。 頻繁 update 導致老闆不買單。