Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Cisco ASA Episode 2 - Striking Back - Internals and Mitigations

44CON Information Security Conference via YouTube

Overview

Delve into the intricacies of Cisco ASA firewalls in this 51-minute conference talk from 44CON 2017. Explore previously unpublished details of ASA internals, reverse engineering techniques, and custom-developed tools for exploit production. Learn about the generalization of exploits to cover over 100 ASA versions and achieve 100% reliability. Gain insights into firmware analysis, filesystem access, branch understanding, and the challenges of debugging the "lina" process. Discover the architecture of asadbg and its automation capabilities, along with a statistics script for vulnerability assessment. Examine secure boot considerations and engage in a Q&A session to further expand your knowledge of Cisco ASA security.

Syllabus

Intro
Cisco ASA devices
Cisco ASA 5505
Emulating ASA
Previous work
Presentation's goals
Getting firmware
Accessing the filesystem
Understanding branches
Still patched?
Reversing "lina"
Painful debugging (video)
Debugging FTW
"Pleasant" debugging
Analyzing heap internals
asadbg architecture
asadbg automation (video)
Statistics script
Secure boot?
Conclusion
Questions?

Taught by

44CON Information Security Conference

Reviews

Start your review of Cisco ASA Episode 2 - Striking Back - Internals and Mitigations

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.