Learn, hack!

URL

http://recon.cx/2013/slides/Recon2013-Josh%20Thomas-Hiding%20%40%20Depth%20-%20Exploring%20%26%20Subvertion%20NAND%20Flash%20memory.pdf

File name

Recon2013-Josh%20Thomas-Hiding%20%40%20Depth%20-%20Exploring%20%26%20Subvertion%20NAND%20Flash%20memory.pdf

File size

1.8 MB

MD5

c466d3ca6c3fa04f2c30ee69f1d09435

SHA1

81eb73e9a4c37d214e9b30ac26e304943874e2aa

In the world of digital storage, gone are the days of spinning platters and magnetic residue. These technologies have been replaced with electron trapping, small voltage monitoring and a lot of magic. These NAND devices are ubiquitous across our culture; from smart phones to laptops to USB memory sticks to GPS navigation devices. We carry many of these devices in our pockets daily without considering the security implications. The NAND-Xplore project is an attempt to explain how NAND Flash storage functions and to expose logical weaknesses in the hardware and implementation architectures. The project also showcases how the vulnerable underpinnings of NAND hardware can be subverted to hide and persist files on mobile devices. The project will release two open source POC tools for Android, one to inject and hide files on raw NAND based devices and another to find those files. The tools will showcase how advanced malware or other offensive tools could be using NAND to hide persistant files on your devices and how you would go about discovering them. The project also consideres how typical forensic software interacts with NAND devices and how those tools can be subverted. (Hint: your current tools probably don't work as well as you would like to believe). Lastly, the project will showcase how easy it is to brick a deployed device beyond repair, be it SCADA or Smartphones. Outline - This should show the logical progression of your presentation.