Lessons Learned from Building a Game Proxy | John Askew | WWHF Deadwood 2022
Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/
What’s more fun than playing a game? Hacking a game (for fun and education, not for griefing of course)! For even more fun, do it live and talk about it! In this presentation, we will highlight the journey of reverse engineering network protocols, building custom client/server/proxy tooling, and hunting for (and possibly exploiting) vulnerabilities. To illustrate this process, we will walk through a real-world case study where we reversed Valve’s GameNetworkingSockets protocol to build custom tools in python and rust, and used them to inspect games, over many weekly livestream sessions. Finally, we will pivot away from games and identify how similar techniques have been used to find serious vulnerabilities in business software. In particular, we will focus on how a better understanding of an application’s network protocols and protocol layers can be crucial to identifying vulnerabilities and weaknesses. Expect to pick up some tips and tricks for writing your own tools
John Askew is a penetration tester, software engineer, and occasional public speaker. He has worked full-time in offensive security since 2007, performing network and application penetration testing engagements for hundreds of clients, from local banks and small businesses to Fortune 100 companies. He is passionate about learning new skills and finding creative solutions to interesting problems, while educating and collaborating with others. Outside of work, he prefers hobbies that don’t involve a computer screen, such as outdoor running and playing the guitar.
///Black Hills Infosec Socials
Twitter: / bhinfosecurity
Mastodon: https://infosec.exchange/@blackhillsi...
LinkedIn: / antisyphon-training
Discord: / discord
///Black Hills Infosec Shirts & Hoodies
https://spearphish-general-store.mysh...
///Black Hills Infosec Services
Active SOC: https://www.blackhillsinfosec.com/ser...
Penetration Testing: https://www.blackhillsinfosec.com/ser...
Incident Response: https://www.blackhillsinfosec.com/ser...
///Backdoors & Breaches - Incident Response Card Game
Backdoors & Breaches: https://www.backdoorsandbreaches.com/
Play B&B Online: https://play.backdoorsandbreaches.com/
///Antisyphon Training
Pay What You Can: https://www.antisyphontraining.com/pa...
Live Training: https://www.antisyphontraining.com/co...
On Demand Training: https://www.antisyphontraining.com/on...
Antisyphon Discord: / discord
Antisyphon Mastadon: https://infosec.exchange/@Antisy_Trai...
///Educational Infosec Content
Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/
Wild West Hackin' Fest YouTube: / wildwesthackinfest
Antisyphon Training YouTube: / antisyphontraining
Active Countermeasures YouTube: / activecountermeasures
Threat Hunter Community Discord: / discord