Sunday, 23 August 2020

Blockchain Exploitation Labs - Part 2 Hacking Blockchain Authorization


Bypassing Blockchain Authorization via Unsecured Functions


Note: Since the first part of this series I have also uploaded some further videos on remediation of reentrancy and dealing with compiler versions when working with this hacking blockchain series.  Head to the console cowboys YouTube account to check those out.  Haha as mentioned before I always forget to post blogs when I get excited making videos and just move on to my next project… So make sure to subscribe to the YouTube if you are waiting for any continuation of a video series.. It may show up there way before here. 

Note 2:  You WILL run into issues when dealing with Ethereum hacking, and you will have to google them as versions and functionality changes often... Be cognizant of versions used hopefully you will not run into to many hard to fix issues. 

In the second part of this lab series we are going to take a look at privacy issues on the blockchain which can result in a vulnerably a traditional system may  not face. Since typically blockchain projects are open source and also sometimes viewable within blockchain explorers but traditional application business logic is not usually available to us. With traditional applications we might not find these issues due to lack of knowledge of internal functionality or inability to read private values on a remote server side script.  After we review some issues we are going to exploit an authorization issues by writing web3.js code to directly bypass vertical authorization restrictions.

Blockchain projects are usually open source projects which allow you to browse their code and see what's going on under the hood.  This is fantastic for a lot of reasons but a developer can run into trouble with this if bad business logic decisions are deployed to the immutable blockchain.  In the first part of this series I mentioned that all uploaded code on the blockchain is immutable. Meaning that if you find a vulnerability it cannot be patched. So let's think about things that can go wrong..

A few things that can go wrong:
  • Randomization functions that use values we can predict if we know the algorithm
  • Hard-coded values such as passwords and private variables you can't change.
  • Publicly called functions which offer hidden functionality
  • Race conditions based on how requirements are calculated

Since this will be rather technical, require some setup and a lot of moving parts we will follow this blog via the video series below posting videos for relevant sections with a brief description of each.  I posted these a little bit ago but have not gotten a chance to post the blog associated with it.  Also note this series is turning into a full lab based blockchain exploitation course so keep a lookout for that.

In this first video you will see how data about your project is readily available on the blockchain in multiple formats for example:
  • ABI data that allows you to interact with methods.
  • Actual application code.
  • Byte code and assembly code.
  • Contract addresses and other data.

 Lab Video Part 1: Blockchain OSINT: 



Once you have the data you need to interact with a contract on the blockchain via some OSINT how do you actually interface with it? That's the question we are going to answer in this second video. We will take the ABI contract array and use it to interact with methods on the blockchain via Web3.js and then show how this correlates to its usage in an HTML file

Lab Video Part 2: Connecting to a Smart Contract: 




Time to Exploit an Application:

Exploit lab time, I created an vulnerable application you can use to follow along in the next video. Lab files can be downloaded from the same location as the last blog located below. Grab the AuthorizationLab.zip file:

Lab file downloads:



Ok so you can see what's running on the blockchain, you can connect to it, now what?   Now we need to find a vulnerability and show how to exploit it. Since we are talking about privacy in this blog and using it to bypass issues. Lets take a look at a simple authorization bypass we can exploit by viewing an authorization coding error and taking advantage of it to bypass restrictions set in the Smart Contract.  You will also learn how to setup a local blockchain for testing purposes and you can download a hackable application to follow along with the exercises in the video..

Lab Video Part 3:  Finding and hacking a Smart Contract Authorization Issue: 





Summary:

In this part of the series you learned a lot, you learned how to transfer your OSINT skills to the blockchain. Leverage the information found to connect to that Smart Contract. You also learned how to interact with methods and search for issues that you can exploit. Finally you used your browsers developer console as a means to attack the blockchain application for privilege escalation.
Related posts

  1. Hacker Tools Hardware
  2. Hacker Tools Mac
  3. Hacker Tool Kit
  4. Hack Tools For Games
  5. Top Pentest Tools
  6. What Is Hacking Tools
  7. Hacking Tools Free Download
  8. Hacking Tools Hardware
  9. Hack App
  10. Hack Tools For Mac
  11. Pentest Tools Framework
  12. Pentest Tools For Mac
  13. Pentest Reporting Tools
  14. Easy Hack Tools
  15. Pentest Tools Open Source
  16. Nsa Hack Tools
  17. Wifi Hacker Tools For Windows
  18. Android Hack Tools Github
  19. Hack Tool Apk
  20. Pentest Reporting Tools
  21. Hacking Tools And Software
  22. Pentest Tools
  23. Hack Tool Apk No Root
  24. Ethical Hacker Tools
  25. New Hacker Tools
  26. Hack And Tools
  27. Hacker Tools Windows
  28. Hacking Tools Github
  29. Hack Apps
  30. Hack Tools 2019
  31. Hacker Tools
  32. Blackhat Hacker Tools
  33. Pentest Tools Bluekeep
  34. Blackhat Hacker Tools
  35. Pentest Box Tools Download
  36. Hacking Tools Hardware
  37. Pentest Tools Free
  38. Hacking Tools For Beginners
  39. Usb Pentest Tools
  40. Hacking Tools Download
  41. Hacking Tools Online
  42. Nsa Hack Tools Download
  43. Pentest Tools Windows
  44. Underground Hacker Sites
  45. Hacking Tools Pc
  46. Hack Tools Download
  47. Pentest Tools Website Vulnerability
  48. Pentest Reporting Tools
  49. Hak5 Tools
  50. Best Hacking Tools 2020
  51. Hack Tools For Games
  52. Hacking Tools Free Download
  53. Pentest Tools Url Fuzzer
  54. Hacker Hardware Tools
  55. Tools 4 Hack
  56. Hacker Tools List
  57. Hacking Tools For Beginners
  58. Hacking Tools 2020
  59. Pentest Tools Windows
  60. Pentest Tools Tcp Port Scanner
  61. Pentest Tools Alternative
  62. How To Make Hacking Tools
  63. Termux Hacking Tools 2019
  64. Hacker Tools For Mac
  65. Hacker Tools Hardware
  66. Hack And Tools
  67. Hacker Tool Kit
  68. Termux Hacking Tools 2019
  69. Hacking Tools 2019
  70. Beginner Hacker Tools
  71. Hacking Tools Name
  72. Hacker Tools For Windows
  73. Hacker Tools Windows
  74. Hacker Tools For Ios
  75. Hacker Tools 2020
  76. Hacking Tools And Software
  77. Hacking Tools Usb
  78. Hacker Tools List
  79. Pentest Tools Website Vulnerability
  80. Hacking Tools For Pc
  81. Pentest Reporting Tools
  82. Hacker Tools Free Download
  83. Best Hacking Tools 2020
  84. Pentest Tools List
  85. Hacking Tools Free Download
  86. Pentest Tools Subdomain
  87. Hacker Tools Online
  88. Pentest Tools Alternative
  89. Hack Tools Download
  90. Hacking Tools Kit
  91. Tools For Hacker
  92. Pentest Automation Tools
  93. Hacking Tools And Software
  94. Hacker Tools Free Download
  95. Hacker Tools Software
  96. Termux Hacking Tools 2019
  97. Easy Hack Tools
  98. Pentest Tools
  99. Pentest Tools Nmap
  100. Hacking Tools Download
  101. Pentest Tools Alternative
  102. Pentest Tools Website Vulnerability
  103. Hacking Tools Pc
  104. Hacking Tools For Kali Linux
  105. Hacking Tools Mac
  106. Growth Hacker Tools
  107. Wifi Hacker Tools For Windows
  108. Hacking Apps
  109. Hacking Tools For Games
  110. Hacking Tools Online
  111. Hacking Tools Free Download
  112. Hacker Tools Free
  113. Hacker Tools Mac
  114. World No 1 Hacker Software
  115. Top Pentest Tools
  116. Nsa Hack Tools Download
  117. Hacker Tools For Ios
  118. Pentest Tools Website Vulnerability
  119. Hacking Tools For Windows
  120. Pentest Tools Nmap
  121. Pentest Tools Website Vulnerability
  122. Physical Pentest Tools
  123. Hack Tools Pc
  124. Pentest Tools For Ubuntu
  125. Hacking App
  126. Hacking Tools For Kali Linux
  127. Hacking Tools For Games
  128. Blackhat Hacker Tools
  129. Pentest Recon Tools
  130. Hacker Search Tools
  131. Hacking Tools Online
  132. Hacker Tools For Windows
  133. Hacking Tools For Beginners
  134. Pentest Tools Download
  135. Hacker Tools Free
  136. Pentest Automation Tools
  137. Game Hacking
  138. Computer Hacker
  139. Hacking Apps
  140. Hacking Apps
  141. Hack Tools For Mac
  142. Hacker Tools 2019
  143. Pentest Tools Port Scanner
  144. Hacking Tools Windows
  145. Hacking Tools For Windows
  146. Hacker Tools Free Download
  147. Hack Tool Apk
  148. Hacker Tool Kit
  149. Hacking Tools Hardware
  150. Hacker Tools Online
  151. Pentest Recon Tools
  152. Pentest Tools For Mac
  153. Hack Tools For Pc
  154. Hacker Tools For Mac
  155. Hack Tools
  156. Pentest Tools For Ubuntu
  157. Hacking Tools For Windows 7
  158. How To Install Pentest Tools In Ubuntu
  159. Hacking Tools 2019
  160. Pentest Tools Framework
  161. Computer Hacker
  162. Hack Apps
  163. Hack Tools Online
  164. Computer Hacker
  165. Android Hack Tools Github
  166. Hacking Tools Mac
  167. Hacker Tools
  168. Hack Website Online Tool
  169. Hack Apps
  170. Pentest Tools Linux

No comments:

Post a Comment