Grey bar Blue bar
Share this:

Sun, 9 Dec 2007

Dino Dai Zovi is such a Rock Star..

Dino is the guy who added much shellcode coolness to MetaSploit, gave the world Karma, released the first virtualization rootkit for Intel (Vitriol), and gave much credibility to the Matasano crowd while he was there..

Although he left the consultancy gig, he popped up briefly again during the year to claim his macbook in the Cansec Hack the Mac challenge and popped up again to break second-life..

http://www.securityevaluators.com/sl/

- -snip- What the exploit does Once the malicious file has been viewed by the victim, the attacker has complete control over the victim's computer - and Second Life avatar. At this point the exploit could make the avatar do anything they like. This particular exploit freezes the avatar and makes them send the attacker's avatar twelve Linden dollars and shout "I got hacked". - -snip-

Full points for style.. and full points for security geek coolness.. - -sigh- im such a fan-boy sometimes..

(you can watch a video of the attack here)

2ndlife.png
" http://www.youtube.com/v/RaCo4USXd5Y&rel=1

/mh