Recomendados
Recomendados
Mais conteúdo relacionado
Último
Último (20)
Destaque
Destaque (20)
AIDE 2011 - Hacker Trail Mix
- 1. Hacker Trail Mix Monday, February 28, 2011
- 2. Who Am I • Elliott “Nullthreat” Cutright • Sr Information Security Analyst • EWA GSI in Bowling Green KY • Member of Corelan Team Monday, February 28, 2011
- 3. About the talk • As many topics and demos I can cover in an hour • Move very quickly • Feel free to contact me for more info • Big thanks to Paterva for the demo license of..... Monday, February 28, 2011
- 4. Maltego • Intel gathering framework • Allows users to start with one piece of information and find more • Uses “Transforms” to find additional data • Free “community” version available in backtrack and at www.paterva.com Monday, February 28, 2011
- 5. Demo Monday, February 28, 2011
- 6. Shodan Monday, February 28, 2011
- 7. Shodan • Computer search engine • Find info about host on the internet w/o touching them Monday, February 28, 2011
- 8. Why do I care? Monday, February 28, 2011
- 9. Oh.. thats why Monday, February 28, 2011
- 10. FOCA • OMG METADATA!! • Can read info from: .doc .ppt .pps .xls .docx .pptx .ppsx .xlsx .sxw .sxc .sxi .odt .ods .odg .odp .pdf .wpd .svg .svgz .jpg • http://www.informatica64.com/FOCA/ Monday, February 28, 2011
- 11. Meta-data? WTF? Monday, February 28, 2011
- 12. Demo Monday, February 28, 2011
- 13. Pshh Metadata • What can we do with some of this cool metadata • Targeted Attacks • I know what OS you run and what app you had Monday, February 28, 2011
- 14. I know where you sleep • Image metadata can have GPS coordinates • hello iPhone :-) • Not just images • hello twitter Monday, February 28, 2011
- 15. Monday, February 28, 2011
- 16. Monday, February 28, 2011
- 17. Monday, February 28, 2011
- 18. Monday, February 28, 2011
- 19. Demo Monday, February 28, 2011
- 20. Pastenum.rb • New tool in development • Searches pastebin sites for “interesting data” • TONS of stuff --> • Not ready for prime time yet • Looking to release at DerbyCon Monday, February 28, 2011
- 21. Zone Transfers • DNS zone transfers are used to replicate DNS entries across multiple DNS servers • Great way to find systems and hostnames without scanning Monday, February 28, 2011
- 22. DIG • Use DIG to find the nameservers • dig teachers.net • Attempt a zone transfer • dig teachers.net @ns1.secure.net axfr Monday, February 28, 2011
- 23. DIG cont. teachers.net. 10 IN A 207.57.106.11 teachers.net. 86400 IN NS ns2.secure.net. teachers.net. 86400 IN NS ns1.secure.net. teachers.net. 86400 IN MX 10 chat.teachers.net. 4Blocks.teachers.net. 10 IN CNAME teachers.net. adulteducation.teachers.net. 10 IN CNAME teachers.net. ak.teachers.net. 10 IN CNAME teachers.net. al.teachers.net. 10 IN CNAME teachers.net. alabama.teachers.net. 10 IN CNAME teachers.net. alaska.teachers.net. 10 IN CNAME teachers.net. ar.teachers.net. 10 IN CNAME teachers.net. arizona.teachers.net. 10 IN CNAME teachers.net. arkansas.teachers.net. 10 IN CNAME teachers.net. Art.teachers.net. 10 IN CNAME teachers.net. australia.teachers.net. 86400 IN CNAME teachers.net Monday, February 28, 2011
- 24. MDNS • Multicast DNS / Zero Config Networking • MDNS = Bonjour = Avahi • MDNS gives up alot of info Monday, February 28, 2011
- 25. dnsrecon • Created by Carlos “Darkoperator” Perez • Get it at https://github.com/darkoperator/ dnsrecon • We can use it to find MDNS Stuff Monday, February 28, 2011
- 26. Demo Monday, February 28, 2011
- 27. Wfuzz • Web application fuzzer • Created by edge-security • Fast directory/file discovery • ...alot more Monday, February 28, 2011
- 28. Wfuzz + Fuzzdb • Combine the Fuzzdb wordlist with wfuzz • Fast and accurate enumeration of applications Monday, February 28, 2011
- 29. Demo Monday, February 28, 2011
- 30. SET • Social-Engineer Toolkit • Created by Dave ‘ReL1K’ Kennedy • Help with SE campaigns Monday, February 28, 2011
- 31. SET • Multiple attacks • Spear Phishing • Tab Nabbing • Browser Client-side attack • Unique Java payload Monday, February 28, 2011
- 32. Demo Monday, February 28, 2011