Hacking Windows Vista Security

1
Hacking Windows Vista Security

• Dan Griffin
• JW Secure, Inc.

2
Introduction

• Who am I?
• What are these tools and where did they come from?

3
Topic Summary

• Sample code projects are C/C based require
  Vista
• Free downloads!
• Topics Crypto, Firewall, IPsec

4
Hacking Crypto

• Whats CNG?
• Whats CMS?
• Whats Twofish?
• Article link
• http//blogs.msdn.com/onoj/archive/2007/05/10/wind
  ows-vista-security-series-adding-a-cipher-algorith
  m-to-windows-vista.aspx
• Code download
• http//download.microsoft.com/download/f/1/2/f12db
  bb5-d164-4e7c-b42d-aaca3efb85dc/CNGSample.EXE

5
Twofish Plug-in Architecture
6
Crypto Demo

• (Or, now NSA cant read my email ?)
• (maybe )

7
Hacking The Firewall

• Whats a network firewall?
• Article link
• http//blogs.msdn.com/onoj/archive/2007/05/09/wind
  ows-vista-security-series-programming-the-windows-
  vista-firewall.aspx
• Code download
• http//download.microsoft.com/download/f/1/2/f12db
  bb5-d164-4e7c-b42d-aaca3efb85dc/FirewallSample.exe
  

8
FwTool Architecture
9
Firewall Demo
10
Hacking IPsec/Socket Extensions

• Whats IPsec?
• Whats Winsock Secure Socket Extensions?
• Code download
• http//download.microsoft.com/download/f/1/2/f12db
  bb5-d164-4e7c-b42d-aaca3efb85dc/IPsecPingSample.EX
  E

11
IPsecPing Architecture
12
IPsecPing Demo

• (Co-developed with V6 Security, Inc.)

13
Questions?

• Contact Info
• Dan Griffin (dan_at_jwsecure.com)
• Blog http//www.jwsecure.com/dan/