Vulnerabilități grave în serviciile online ale

unui telecom din România

Prisăcaru Anatolie@shark0der

01.12.2012 @DefCamp

The problem

The motivation

Let's dive into all this stuff

The configurator

The surprise

The serious approach

… still serious approach

This can't be real

What about pushing the limits?

… even more

Unbelievable, but it worked :)

Really worked!

And I've got more then I expected!

Under the hood

The key

The simplicity

The stupidity

The lesson

NEVER BUT NEVER TRUST USER INPUT

THE END

Prisăcaru Anatolie@shark0der

01.12.2012 @DefCamp