1IM exploit DISCOVERED_BY Greg Linares
Greg says he was one of the first people to discover the 1IM exploit.
Explicit Confidence 98% · Greg Linares EP 160 Details
“I was one of the first to discover the 1IM exploit.”
Person
person:greg_linares
Also: Greg, Laughing Mantis
Guest who describes his history as a virus writer, vulnerability researcher, and red teamer.
Guest who describes his history as a virus writer, vulnerability researcher, and red teamer.
“A big thank you to Greg Linares, AKA, Laughing Mantis”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | Visual Basic | Explicit | 160 |
| outgoing | USES | Microsoft Word | Explicit | 160 |
| outgoing | USES | Microsoft Excel | Explicit | 160 |
| outgoing | MEMBER_OF | eEye | Explicit | 160 |
| outgoing | USES | fuzzing | Explicit | 160 |
| outgoing | USES | hex editor | Explicit | 160 |
| outgoing | USES | Olly | Explicit | 160 |
| outgoing | USES | ARP poisoning | Explicit | 160 |
| outgoing | USES | man-in-the-middle attack | Explicit | 160 |
| outgoing | USES | DHCP spoofing | Explicit | 160 |
| outgoing | USES | Proxmark | Explicit | 160 |
| outgoing | EXPLOITS | access-camera buffer overflow | Explicit | 160 |
| outgoing | USES | boot root | Explicit | 160 |
| incoming | DISCOVERED_BY | 1IM exploit | Explicit | 160 |
| incoming | DEVELOPED_BY | 1IM punter | Explicit | 160 |
| incoming | DEVELOPED_BY | macro virus | Explicit | 160 |
1IM exploit DISCOVERED_BY Greg Linares
Greg says he was one of the first people to discover the 1IM exploit.
Explicit Confidence 98% · Greg Linares EP 160 Details
“I was one of the first to discover the 1IM exploit.”
1IM punter DEVELOPED_BY Greg Linares
Greg says he made the 1IM punter after finding the AOL client vulnerability.
Explicit Confidence 98% · Greg Linares EP 160 Details
“I remember finding that and making the 1IM punter back in the day.”
macro virus DEVELOPED_BY Greg Linares
Greg says he wrote macro viruses, including a macro virus that modified his school's Excel grade records.
Explicit Confidence 98% · Greg Linares EP 160 Details
“I made a macro virus that would look for my student ID number”
Greg Linares USES Visual Basic
Jack describes Greg's specialty as using Visual Basic to create malicious macros.
Explicit Confidence 97% · Jack Rhysider EP 160 Details
“His specialty was using Visual Basic to code malicious macros”
Greg Linares USES Microsoft Word
Greg used malicious Microsoft Word documents and macros to compromise computers when victims opened them.
Explicit Confidence 97% · Jack Rhysider EP 160 Details
“he would send the Word doc to someone, trick them into opening it”
Greg Linares USES Microsoft Excel
Greg used Excel as the school's grade system to deploy his macro virus and alter grades and attendance.
Explicit Confidence 99% · Greg Linares EP 160 Details
“the entire grade system was in Excel, and I made a macro virus”
Greg Linares MEMBER_OF eEye
Greg joined eEye as a researcher after the company noticed his public exploit and malware work.
Explicit Confidence 99% · Jack Rhysider EP 160 Details
“eEye saw that Greg was writing a lot of malware and posting it publicly, and they liked that and decided to hire him”
Greg Linares USES fuzzing
Greg manually fuzzed Microsoft Word and later used fuzzing to search Office for crashes and vulnerabilities.
Explicit Confidence 99% · Greg Linares EP 160 Details
“I went in there and started manually fuzzing Word at the time.”
Greg Linares USES hex editor
Greg used a hex editor to modify Office document data at a low level while testing Word and other Office applications.
Explicit Confidence 99% · Greg Linares EP 160 Details
“I could look at Office — hex editors in Office”
“he opened up a Word doc, not in Microsoft, though; in a hex editor where you can manipulate the ones and zeros directly in the file”
Greg Linares USES Olly
Greg used Olly as a debugger to inspect application assembly, registers, memory, and behavior.
Explicit Confidence 99% · Greg Linares EP 160 Details
“Olly is a tool that you attach to your — any application that you want to see at low level”
Greg Linares USES ARP poisoning
During a red-team engagement, Greg used ARP poisoning to intercept a plaintext credential.
Explicit Confidence 99% · Greg Linares EP 160 Details
“let’s try one more — let’s do some ARP poisoning”
Greg Linares USES man-in-the-middle attack
Greg used man-in-the-middle attacks to steal credentials during a venture-capital-company penetration test.
Explicit Confidence 99% · Greg Linares EP 160 Details
“There, I start doing man-in-the-middle attacks”
Greg Linares USES DHCP spoofing
Greg identifies DHCP spoofing as one of the layer-two attack techniques he used or recommended during red-team work.
Explicit Confidence 94% · Greg Linares EP 160 Details
“your ARP poisoning, your DHCP spoofing, all of those”
Greg Linares USES Proxmark
Greg used a Proxmark system to capture an employee badge identifier and clone access badges.
Explicit Confidence 99% · Greg Linares EP 160 Details
“I have a Proxmark system; I keep pulling it and all of a sudden I notice her ID matches up”
Greg Linares EXPLOITS access-camera buffer overflow
Greg exploited an unpatched access-camera buffer overflow to gain control of the cameras.
Explicit Confidence 99% · Greg Linares EP 160 Details
“there’s an access buffer overflow that allows you to control and gain access to every one of these cameras”
Greg Linares USES boot root
After entering the server room, Greg used boot-root techniques to gain elevated access to the machines.
Explicit Confidence 99% · Greg Linares EP 160 Details
“Went to the server room, and from there, boot-rooted all the machines.”