GRUPO 40121

Blockchain Exploitation Labs - Part 2 Hacking Blockchain Authorization


Bypassing Blockchain Authorization via Unsecured Functions


Note: Since the first part of this series I have also uploaded some further videos on remediation of reentrancy and dealing with compiler versions when working with this hacking blockchain series.  Head to the console cowboys YouTube account to check those out.  Haha as mentioned before I always forget to post blogs when I get excited making videos and just move on to my next project… So make sure to subscribe to the YouTube if you are waiting for any continuation of a video series.. It may show up there way before here. 

Note 2:  You WILL run into issues when dealing with Ethereum hacking, and you will have to google them as versions and functionality changes often... Be cognizant of versions used hopefully you will not run into to many hard to fix issues. 

In the second part of this lab series we are going to take a look at privacy issues on the blockchain which can result in a vulnerably a traditional system may  not face. Since typically blockchain projects are open source and also sometimes viewable within blockchain explorers but traditional application business logic is not usually available to us. With traditional applications we might not find these issues due to lack of knowledge of internal functionality or inability to read private values on a remote server side script.  After we review some issues we are going to exploit an authorization issues by writing web3.js code to directly bypass vertical authorization restrictions.

Blockchain projects are usually open source projects which allow you to browse their code and see what's going on under the hood.  This is fantastic for a lot of reasons but a developer can run into trouble with this if bad business logic decisions are deployed to the immutable blockchain.  In the first part of this series I mentioned that all uploaded code on the blockchain is immutable. Meaning that if you find a vulnerability it cannot be patched. So let's think about things that can go wrong..

A few things that can go wrong:
  • Randomization functions that use values we can predict if we know the algorithm
  • Hard-coded values such as passwords and private variables you can't change.
  • Publicly called functions which offer hidden functionality
  • Race conditions based on how requirements are calculated

Since this will be rather technical, require some setup and a lot of moving parts we will follow this blog via the video series below posting videos for relevant sections with a brief description of each.  I posted these a little bit ago but have not gotten a chance to post the blog associated with it.  Also note this series is turning into a full lab based blockchain exploitation course so keep a lookout for that.

In this first video you will see how data about your project is readily available on the blockchain in multiple formats for example:
  • ABI data that allows you to interact with methods.
  • Actual application code.
  • Byte code and assembly code.
  • Contract addresses and other data.

 Lab Video Part 1: Blockchain OSINT: 



Once you have the data you need to interact with a contract on the blockchain via some OSINT how do you actually interface with it? That's the question we are going to answer in this second video. We will take the ABI contract array and use it to interact with methods on the blockchain via Web3.js and then show how this correlates to its usage in an HTML file

Lab Video Part 2: Connecting to a Smart Contract: 




Time to Exploit an Application:

Exploit lab time, I created an vulnerable application you can use to follow along in the next video. Lab files can be downloaded from the same location as the last blog located below. Grab the AuthorizationLab.zip file:

Lab file downloads:



Ok so you can see what's running on the blockchain, you can connect to it, now what?   Now we need to find a vulnerability and show how to exploit it. Since we are talking about privacy in this blog and using it to bypass issues. Lets take a look at a simple authorization bypass we can exploit by viewing an authorization coding error and taking advantage of it to bypass restrictions set in the Smart Contract.  You will also learn how to setup a local blockchain for testing purposes and you can download a hackable application to follow along with the exercises in the video..

Lab Video Part 3:  Finding and hacking a Smart Contract Authorization Issue: 





Summary:

In this part of the series you learned a lot, you learned how to transfer your OSINT skills to the blockchain. Leverage the information found to connect to that Smart Contract. You also learned how to interact with methods and search for issues that you can exploit. Finally you used your browsers developer console as a means to attack the blockchain application for privilege escalation.
More articles
  1. Hacks And Tools
  2. How To Hack
  3. Pentest Recon Tools
  4. Hacker Tools 2020
  5. Pentest Tools Review
  6. Hacking Tools Download
  7. Bluetooth Hacking Tools Kali
  8. Hacker Tools 2020
  9. Underground Hacker Sites
  10. Hackrf Tools
  11. Hacker Tools Online
  12. Hacker Tools For Ios
  13. Pentest Recon Tools
  14. Termux Hacking Tools 2019
  15. Hack Tools 2019
  16. Easy Hack Tools
  17. Hacker Tools For Windows
  18. Hacking Tools For Windows
  19. Hacks And Tools
  20. Hacking Tools Mac
  21. Hacking Tools For Games
  22. Hacker Tools Software
  23. Pentest Tools Url Fuzzer
  24. Hacking Apps
  25. Pentest Tools Online
  26. Hacker Tools Online
  27. Hacker Search Tools
  28. Pentest Tools Alternative
  29. What Are Hacking Tools
  30. How To Install Pentest Tools In Ubuntu
  31. Hacker Techniques Tools And Incident Handling
  32. Ethical Hacker Tools
  33. Pentest Tools Port Scanner
  34. Hack Tools For Pc
  35. Top Pentest Tools
  36. Pentest Reporting Tools
  37. Pentest Tools Review
  38. Nsa Hack Tools Download
  39. Pentest Tools
  40. Hackers Toolbox
  41. Hack Tools 2019
  42. Hacking Apps
  43. Hack Apps
  44. Ethical Hacker Tools
  45. Hack Tools For Pc
  46. Pentest Tools Online
  47. Usb Pentest Tools
  48. Tools Used For Hacking
  49. Pentest Tools Windows
  50. Hacking Tools Download
  51. Hacking Tools For Games
  52. Hacking Tools For Windows 7
  53. Hack Tools For Ubuntu
  54. Hacking Tools Mac
  55. Nsa Hacker Tools
  56. Hacking Tools Name
  57. Wifi Hacker Tools For Windows
  58. Nsa Hack Tools Download
  59. Tools Used For Hacking
  60. Hacker Tools Online
  61. Hacker Search Tools
  62. Hacking Tools For Windows
  63. Hacker Search Tools
  64. Hacker Tools
  65. Game Hacking
  66. Game Hacking
  67. Physical Pentest Tools
  68. Nsa Hack Tools
  69. Pentest Tools Open Source
  70. Pentest Tools Port Scanner
  71. Hacking Tools For Kali Linux
  72. Hacker Tools Mac
  73. Pentest Tools Linux
  74. Hacker Hardware Tools
  75. Ethical Hacker Tools
  76. Hacker Tool Kit
  77. Hack Tools For Mac
  78. Hacking Apps
  79. Beginner Hacker Tools
  80. Hacking App
  81. Hacker Tools Mac
  82. Growth Hacker Tools
  83. Easy Hack Tools
  84. Best Hacking Tools 2020
  85. Hacker
  86. Hacking Tools
  87. Hacker Tools Apk Download
  88. Android Hack Tools Github
  89. Hack Rom Tools
  90. Hacker Tools Linux
  91. Hacking Tools
  92. Hacking Tools Windows 10
  93. Best Hacking Tools 2020
  94. Hack Tools 2019
  95. New Hacker Tools
  96. Hacking Apps
  97. Hacker Tools Free Download
  98. Hacker Tools 2019
  99. Best Pentesting Tools 2018
  100. Pentest Tools Online
  101. Hack Apps
  102. Hacker Tools Software
  103. Tools For Hacker
  104. Hacking Tools For Windows 7
  105. Hacking Tools For Games
  106. Hack Tools Online
  107. Hacking Apps
  108. Pentest Tools Nmap
  109. Hacking Tools For Pc

No hay comentarios:

Publicar un comentario

Nota: solo los miembros de este blog pueden publicar comentarios.