TESO (Austrian hacker group)

TESO was a hacker group, which originated in Austria. It was active from 1998 to 2004, and during its peak around 2000, it was responsible for a significant share of the exploits on the bugtraq mailing list.

This article is about a hacker group. For the Ugandan ethnic group, see Iteso. For the ferryboat service to the Dutch island of Texel, see Royal TESO. For the video game, see The Elder Scrolls Online.

History
TESO Research Lab

In 1998, Teso was founded, and quickly grew to 6 people, which first met in 1999 at the CCC Camp near Berlin.

By 2000, the group was at its peak, and started speaking on various conferences, wrote articles for Phrack and released security tools and exploits at a very high pace. Some of its exploits only became known after leaking to the community. This included exploits for wu-ftp, apache, and openssh.

2000 First remote vulnerability in OpenBSD followed by a series of remote exploits against OpenBSD (some co-authored with ADM). Forced OpenBSD to remove the claim from the OpenBSD webpage "7 years without vulnerability".

In September 2001 released comprehensive Format String Research Paper by scut describing uncontrolled format string vulnerabilities.

In 2003, the group informally disbanded, and in 2004 the website went down.

Achievements
  • In 2000, developed hellkit, the first shellcode generator.
  • In 2000, wrote TesoGCC, the first format string vulnerability scanner, and the first comprehensive guide on format string exploitation.
  • BurnEye team member is widely believed to be one of the first proper ELF executable crypters.

Quotes

ADM and TESO made almost inappropriately large splashes in the community when they were active. Almost all their exploits were beyond the standard, and at times it seemed they were the ones finding all the new bug-classes. But at their peak, they couldn't have been very large groups. Certainly smaller than the reverse engineering and security group at a good sized IDS/IPS company these days.

— Dave Aitel, CEO and Founder of Immunity, Inc.[1]

Members and name
The original crew from left to right: Typo (Paul Bohm), Scut, Oxigen, Edi, Hendy

The name originally was an acronym of the nicknames of the original founders (typo, edi, stanly, oxigen), but as many of the most skilled members joined later, this interpretation quickly became meaningless. Teso originally and during its peak was a small and tightly knit group. A full list of members does not appear to exist, but if public sources can be trusted, at least the following members existed:

gollark: ↑ you, as a result
gollark: ```rustfn matches(expr: &Value, condition: &Value) -> Option<Bindings> { match (expr, condition) { (Value::Num(a), Value::Num(b)) => if a == b { Some(HashMap::new()) } else { None }, (Value::Call(efn, eargs), Value::Call(rfn, rargs)) => { if efn != rfn { return None } if rargs.len() != eargs.len() { return None } let mut out_bindings = HashMap::new(); for (rarg, earg) in rargs.iter().zip(eargs) { match matches(earg, rarg) { Some(x) => out_bindings.extend(x), None => return None } } Some(out_bindings) }, (_, Value::Identifier(b)) => Some(vec![(b.clone(), expr.clone())].into_iter().collect()), _ => None }}```
gollark: You fell right into my trap, actually.
gollark: ↓ wrong
gollark: I should offer an osmarks.net™ hosted JSON validator™ for this.

See also
  • Goatse Security
  • w00w00 - A rivaling hacking group. Some research and releases were published together with w00w00 members.
  • The Hacker's Choice - Some team-teso members joined THC after TESO was disbanded.

References
  1. http://archives.neohapsis.com/archives/dailydave/2005-q2/0386.html Dave Aitel on TESO
  2. Source: http://downloads.securityfocus.com/vulnerabilities/exploits/bsdchpass-exp.c
  3. Source: http://www.trust-us.ch/phrack/phrack/62/p62-0x04_Prophile_on_scut.txt
  4. Source: http://www.ccc.de/congress/2001/fahrplan/event/255.de.html
  5. Source: http://marc.info/?l=bugtraq&m=99385173302656&w=2
  6. Source: http://examples.oreilly.com/networksa/tools/7350854.c
  7. Source: http://freeworld.thc.org/root/docs/loadable_kernel_modules/p58-0x06.txt
  8. Source: http://mixter.void.ru/about.html
  9. Source: http://packetstormsecurity.org/groups/teso/teso-advisory-011.txt
  10. http://julianor.tripod.com/bc/formatstring-1.2.pdf>Exploiting format strings vulnerabilies
  11. http://packetstormsecurity.org/groups/teso/arpmitm-0.1.tar.gz
  12. Source: http://packetstormsecurity.org/groups/teso/adv6.tar.gz
  13. Source: http://packetstormsecurity.org/9909-exploits/dirthy.c
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.