雲端入侵:郵件攻擊與密碼竊取

30
雲端入侵:郵件攻擊與密碼竊取 OpenBlue

Transcript of 雲端入侵:郵件攻擊與密碼竊取

  • OpenBlue

  • 5 5

    /

  • IaaSPaaSIaaSPaaSSaaS

    http://zh.wikipedia.org/wiki/

  • 1. (DDoS,,,Web)

    )

    2. (DNS,,)

    3. (DDoS,)

    4. (,/)

    5. ()

  • ()

  • HTML HTML WordExcelPDF

    Cross Site Script

  • DEMO

    1. (Word)

    4.

    6.

    Internet

    10

    )2.

    3.

    5.

  • Facebook XSS

  • Mail Server

    DEMO

    http://xxx

    Server

  • Mail Server

    DEMO

    Server

  • WINRAR/

  • scriptscript

    Mail Server

    DEMO

  • /

    script

  • Cracker ......(CAPTCHA)

    http://en.wikipedia.org/wiki/Captcha

  • (CAPTCHA)

  • GMail Commander

    GMail Commander Gmail

    DEMO

    Gmail

    Gmail

  • GMail Commander

    () http://www.autohotkey.com/forum/topic67120.html http://www.autohotkey.com/forum/topic67120.html

  • Windows Password Recovery Tools ()

    cookies

    http://briian.com/?p=6910

  • GPUCPU

    GPUBrute Force100GPUGPU

    http://www.golubev.com/blog/

  • /

    //

    Default Password List Default Password List

    http://www.phenoelit-us.org/dpl/dpl.html

  • 5 /

  • [email protected]

    http://anti-hacker.blogspot.com

    Plurk http://www.plurk.com/openblue FaceBook http://www.facebook.com/openblue FaceBook http://www.facebook.com/openbluehttp://www.facebook.com/NetWarGame

    http://zh-tw.justin.tv/openblueTV