Saturday, 20 January 2024

Blockchain Exploitation Labs - Part 2 Hacking Blockchain Authorization


Bypassing Blockchain Authorization via Unsecured Functions


Note: Since the first part of this series I have also uploaded some further videos on remediation of reentrancy and dealing with compiler versions when working with this hacking blockchain series.  Head to the console cowboys YouTube account to check those out.  Haha as mentioned before I always forget to post blogs when I get excited making videos and just move on to my next project… So make sure to subscribe to the YouTube if you are waiting for any continuation of a video series.. It may show up there way before here. 

Note 2:  You WILL run into issues when dealing with Ethereum hacking, and you will have to google them as versions and functionality changes often... Be cognizant of versions used hopefully you will not run into to many hard to fix issues. 

In the second part of this lab series we are going to take a look at privacy issues on the blockchain which can result in a vulnerably a traditional system may  not face. Since typically blockchain projects are open source and also sometimes viewable within blockchain explorers but traditional application business logic is not usually available to us. With traditional applications we might not find these issues due to lack of knowledge of internal functionality or inability to read private values on a remote server side script.  After we review some issues we are going to exploit an authorization issues by writing web3.js code to directly bypass vertical authorization restrictions.

Blockchain projects are usually open source projects which allow you to browse their code and see what's going on under the hood.  This is fantastic for a lot of reasons but a developer can run into trouble with this if bad business logic decisions are deployed to the immutable blockchain.  In the first part of this series I mentioned that all uploaded code on the blockchain is immutable. Meaning that if you find a vulnerability it cannot be patched. So let's think about things that can go wrong..

A few things that can go wrong:
  • Randomization functions that use values we can predict if we know the algorithm
  • Hard-coded values such as passwords and private variables you can't change.
  • Publicly called functions which offer hidden functionality
  • Race conditions based on how requirements are calculated

Since this will be rather technical, require some setup and a lot of moving parts we will follow this blog via the video series below posting videos for relevant sections with a brief description of each.  I posted these a little bit ago but have not gotten a chance to post the blog associated with it.  Also note this series is turning into a full lab based blockchain exploitation course so keep a lookout for that.

In this first video you will see how data about your project is readily available on the blockchain in multiple formats for example:
  • ABI data that allows you to interact with methods.
  • Actual application code.
  • Byte code and assembly code.
  • Contract addresses and other data.

 Lab Video Part 1: Blockchain OSINT: 



Once you have the data you need to interact with a contract on the blockchain via some OSINT how do you actually interface with it? That's the question we are going to answer in this second video. We will take the ABI contract array and use it to interact with methods on the blockchain via Web3.js and then show how this correlates to its usage in an HTML file

Lab Video Part 2: Connecting to a Smart Contract: 




Time to Exploit an Application:

Exploit lab time, I created an vulnerable application you can use to follow along in the next video. Lab files can be downloaded from the same location as the last blog located below. Grab the AuthorizationLab.zip file:

Lab file downloads:



Ok so you can see what's running on the blockchain, you can connect to it, now what?   Now we need to find a vulnerability and show how to exploit it. Since we are talking about privacy in this blog and using it to bypass issues. Lets take a look at a simple authorization bypass we can exploit by viewing an authorization coding error and taking advantage of it to bypass restrictions set in the Smart Contract.  You will also learn how to setup a local blockchain for testing purposes and you can download a hackable application to follow along with the exercises in the video..

Lab Video Part 3:  Finding and hacking a Smart Contract Authorization Issue: 





Summary:

In this part of the series you learned a lot, you learned how to transfer your OSINT skills to the blockchain. Leverage the information found to connect to that Smart Contract. You also learned how to interact with methods and search for issues that you can exploit. Finally you used your browsers developer console as a means to attack the blockchain application for privilege escalation.
Related posts
  1. Pentest Tools Url Fuzzer
  2. Hacker Tools For Mac
  3. Hacker Tools Free Download
  4. Pentest Recon Tools
  5. Black Hat Hacker Tools
  6. Pentest Tools Review
  7. Pentest Tools Kali Linux
  8. Hacker Tools 2019
  9. Hacking Tools For Kali Linux
  10. Hacker
  11. Hacking Tools Github
  12. Android Hack Tools Github
  13. Hacker Tools 2020
  14. Pentest Tools Linux
  15. Hacker Tools List
  16. Hacker Tools Apk Download
  17. Hack App
  18. New Hacker Tools
  19. Black Hat Hacker Tools
  20. Hacking Tools Kit
  21. Hacking Tools Windows
  22. Pentest Tools Alternative
  23. Hack Rom Tools
  24. Tools For Hacker
  25. Pentest Tools Review
  26. Hack Rom Tools
  27. Hacking Tools For Pc
  28. Hacker Tools Github
  29. Pentest Tools Subdomain
  30. Hacker
  31. Hacking Tools 2019
  32. Hack Tools
  33. Best Hacking Tools 2019
  34. Kik Hack Tools
  35. Hacking Tools For Mac
  36. Pentest Tools Apk
  37. Hack Tools Mac
  38. Install Pentest Tools Ubuntu
  39. Hack Tools
  40. Nsa Hacker Tools
  41. Github Hacking Tools
  42. What Are Hacking Tools
  43. Hacking Tools 2019
  44. Usb Pentest Tools
  45. Game Hacking
  46. How To Make Hacking Tools
  47. Hacking Tools Github
  48. Hack Tools Github
  49. Best Hacking Tools 2019
  50. Hacker Tools 2019
  51. Pentest Tools Website
  52. World No 1 Hacker Software
  53. Hacking Tools For Beginners
  54. Hacker Tools Online
  55. Hacker
  56. Pentest Reporting Tools
  57. Hackrf Tools
  58. Hacker Tools For Mac
  59. Hacking Tools Download
  60. Hacking Tools Software
  61. Pentest Tools Website Vulnerability
  62. Pentest Tools Website
  63. Hacking Apps
  64. Hack Tools Online
  65. Pentest Tools Alternative
  66. Hack Tools For Windows
  67. Pentest Tools Framework
  68. New Hacker Tools
  69. Hacker Tools Hardware
  70. Wifi Hacker Tools For Windows
  71. Hacker Tools Windows
  72. Pentest Tools Bluekeep
  73. Hackers Toolbox
  74. Hacking Apps
  75. Hacker Tools Linux
  76. Pentest Tools Apk
  77. Hacker Tools 2019
  78. Pentest Recon Tools
  79. Pentest Tools Website
  80. Termux Hacking Tools 2019
  81. Hacking Apps
  82. Hacker Tools For Pc
  83. Hack Tools Pc
  84. Hacking Tools Usb
  85. Pentest Tools Subdomain
  86. Hack Tools For Ubuntu
  87. Hacking Tools Hardware
  88. Pentest Tools Bluekeep
  89. Tools Used For Hacking
  90. Hacking Tools For Mac
  91. Hack Tools For Mac
  92. Termux Hacking Tools 2019
  93. Hacker Tools Software
  94. Hacking App
  95. Pentest Tools
  96. Hak5 Tools
  97. Hacker Tools Online
  98. Pentest Tools For Ubuntu
  99. Hack Tools Mac
  100. Free Pentest Tools For Windows
  101. Pentest Tools Kali Linux
  102. Pentest Tools List
  103. Pentest Tools Download
  104. Pentest Tools Framework
  105. Hacking Tools Kit
  106. Free Pentest Tools For Windows
  107. Hacks And Tools
  108. Hack Rom Tools
  109. Hack Tools Github
  110. Pentest Tools Framework
  111. Hack Tools For Pc
  112. Hacker Tools
  113. Wifi Hacker Tools For Windows
  114. Pentest Tools Apk
  115. Hack Rom Tools
  116. Hack Tools 2019
  117. Blackhat Hacker Tools
  118. Hack Tools For Mac
  119. Termux Hacking Tools 2019
  120. Wifi Hacker Tools For Windows
  121. Hacker Tools For Mac
  122. Top Pentest Tools
  123. Hacker Tools Hardware
  124. Hacker Tools Online
  125. How To Install Pentest Tools In Ubuntu
  126. Hacking Tools 2020
  127. Hack Tools 2019
  128. Pentest Tools Tcp Port Scanner
  129. Pentest Tools Find Subdomains
  130. Hacking Tools For Beginners
  131. Hacking Tools
  132. Hack Rom Tools
  133. Hacker Tools Apk Download
  134. Ethical Hacker Tools

No comments:

Post a Comment