Looking inside the (drop) box

7th USENIX Workshop on Offensive Technologies, WOOT 2013

Volumn , Issue , 2013, Pages

  Kholia, Dhiru ^a   Węgrzyn, Przemysław ^b  

^a UNIVERSITY OF BRITISH COLUMBIA   (Canada)

^b CodePainters ^*  (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

HIGH LEVEL LANGUAGES; SECURITY SYSTEMS;

BLACK BOXES; CLOUD-BASED; CODE INJECTION; DESIGN AND IMPLEMENTATIONS; FILE STORAGE; OPEN SOURCES; SECURITY ANALYSIS; TWO FACTOR AUTHENTICATION;

DIGITAL STORAGE;

EID: 85084164080     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (22)

1. BATCHELDER, N. The structure of .pyc files. http://nedbatchelder.com/blog/200804/the_structure_of_pyc_files.html, 2008.
2. COLLIGNON, N., AND AVIAT, J.-B. passe-partout, extract ssl private keys from process memory. https://github.com/kholia/passe-partout, 2011.
3. FEWER, S. Reflective DLL injection. www.harmonysecurity.com/files/HS-P005_ReflectiveDllInjection.pdf, 2008.
4. FEWER, S. Reflective dll injection code. https://github.com/stephenfewer/ReflectiveDLLInjection, 2008.
5. FRITSCH, H. Dropbox bytecode decryption tool. https://github.com/rumpeltux/dropboxdec, 2012.
6. GNU. LD_PRELOAD - dynamic linker and loader feature. http://man7.org/linux/man-pages/man8/ld.so.8.html, 1987.
7. HUNTER, R. How dropbox did it and how python helped. PyCon 2011 (2011).
8. KHOLIA, D. db-lsp-disc dissector to figure out host_int. https://github.com/kholia/ettercap/tree/dropbox, 2013.
9. KHOLIA, D. Long promised post module for hijacking dropbox accounts. https://github.com/rapid7/metasploit-framework/pull/1497, 2013.
10. NEWTON, D. Dropbox authentication: insecure by design. http://dereknewton.com/2011/04/dropbox-authentication-static-host-ids/, 2011.
11. PORTNOY, A., AND SANTIAGO, A.-R. Reverse engineering python applications. In Proceedings of the 2nd conference on USENIX Workshop on offensive technologies (2008), USENIX Association, p. 6.
12. RETZLAFF, J. py2exe, distutils extension to build standalone windows executable programs from python scripts. https://pypi.python.org/pypi/bbfreeze/, 2002.
13. RIGO, A., ET AL. Pypy, python interpreter and just-in-time compiler. http://pypy.org/, 2009.
14. RUFF, N., AND LEDOUX, F. Encryption key extractor for dropbox dbx files. https://github.com/newsoft/dbx-keygen-linux.git, 2008.
15. RUFF, N., AND LEDOUX, F. A critical analysis of dropbox software security. ASFWS 2012, Application Security Forum (2012).
16. SCHMITT, R. bbfreeze, create standalone executables from python scripts. https://pypi.python.org/pypi/bbfreeze/, 2007.
17. SMITH, R. pyretic, in memory reverse engineering for obfuscated python bytecode. BlackHat / Defcon 2010 security conferences (2010).
18. SQLITE@HWACI.COM. The sqlite encryption extension (see). http://www.hwaci.com/sw/sqlite/see.html, 2008.
19. VAN DER LAAN, W. dropship - dropbox api utilities. https://github.com/driverdan/dropship, 2011.
20. VAN ROSSUM, G. Global Interpreter Lock. http://wiki.python.org/moin/GlobalInterpreterLock, 1991.
21. VARIOUS. Monkey patch, modifying the run-time code of dynamic language. http://en.wikipedia.org/wiki/Monkey_patch, 1972.
22. WIBITI, ELOI VANDERBEKEN, F. L., ET AL. uncompyle2, a python 2.7 byte-code decompiler, written in python 2.7. https://github.com/wibiti/uncompyle2.git, 2012.