How to Hack VMware vCenter Server in 60 Seconds
Alexander Minozhenko explores how to hack vmware vcenter server in 60 seconds at DEF CON 20, examining penetration-testing and practical defenses.
Summary
Architecture and Background
Copy of the slides for this talk are here: How to Hack VMware vCenter Server in 60 Seconds Alexander Minozhenko Senior Penetration Tester, ERPScan This talk will discuss some ways to gain control over the virtual infrastructure through vCenter's services.
Vulnerability Analysis
I will describe a few non-dangerous bugs (they were 0-days when we found them), but if we can use all of them together, we will get administrative access to vCenter which means to the whole virtual network.
Exploitation and Demonstrations
Alexander Minozhenko works in the leading IT security company ERPScan as penetration tester.
Remediation and Defensive Strategies
Alexander graduated in 2012 from St. Petersburg National Research University ITMO, faculty of computer science. Also he likes to participate in CTF competition. Twitter: @al3xmin
Related talks
Main Stage·1 hr 5 min
Dan Kaminsky
Dan Kaminsky details black Ops Dan Kaminsky Chief Scientist, DKH If there's one thing we know, it's that we're doing it wrong.
Main Stage·41 min
Dustin Hoffman · Semon Rezchikov
Dustin Hoffman and Semon Rezchikov details busting the BARR: Tracking "Untrackable" Private Aircraft for Fun &Profit Dustin Hoffman President & Senior Engineer, Exigent Systems Inc.
Main Stage·33 min
FX · Greg
FX and Greg details hacking [Redacted] Routers FX Leader, Phenoelit Group, Recurity Labs Greg Recurity Labs [Redacted] routers are no longer devices only seen in [Redacted].