by Paul Asadoorian Back when I worked for a university I need to write a fast banner grabber. This had to grab banners either on a specific port, or a set of ports and run against two class B networks. Speed was key, the faster the better as my incident response process relied on saving […]
In the past on the podcast we’ve talked about a number of tools for document metadata gathering and how we can use them for gathering good information. I’ve talked about EXIFtool for examining and deleting metadata from JPEGs. This was helpful for some info, but only on images. I’ve covered Metagoofil, where we use it […]
by Paul Asadoorian It has been a few weeks since the release of patches (and exploits) for MS08-067. We all should have had plenty of time to deploy patches to our systems and reboot for them to take effect. How about we make sure? Don’t have one of those expensive scanning tools? How about Nessus? […]
By Paul Asadoorian This is a nice, easy way, to build a custom dictionary for your target. I got some of the original code from SANS Security 560 by Ed Skoudis. With his permission, I’ve published some of my enhancements. The first step is to grap the entire web site: wget -r -l 2 www.targetwebsite.com […]
This is just my advice, and is actually a very nebulous thing to answer. I’ll tell you what has worked for me over the years. I’m just breaking the surface, and still learning from my own advice. My (sage?) Advice * Read all you can find! – the Internets have exploded with all sorts of […]
By Paul Asadoorian There are lots of ways to skin this cat. This came up and piqued my interest because I was looking at the Nessus plugin to do this. This is a neat concept, but relies on some really old information from Nmap 3.50 OS fingerprints. I decided that using Nmap directly is probably […]
I recently was able to meet up with Bob while he was on the run. He told me that he was on a long flight recently headed in to Boston several weeks back (he’s gotta keep on the move!), and he decided to fire up Kismet for some passive captures while on the plane. He […]
For you listeners of the podcast, you may be aware that I’m doing some research into utilizing document metadata, and the inferences that an attacker can make about the victims overall operating environment. This analysis would allow an attacker to be able to deliver more accurate, targeted attacks against a victim. One of the tools […]
First off: Whoa. This year’s ICE games were a significant departure from last years games (in a good way of course). Last year, Paul and I MC’ed, this year we ran teams. The scoring engine was much slicker as well. The educational experience for the defenders was immense. There’s nothing like walking in to a […]
Let me preface this by stating I am not a lawyer. I don’t live in California. I’m also not an expert at reading legislation, and I may also be thinking about this the wrong way. That said, I’ve been reading California’s legislation marked SB 31, which makes it illegal to read RFID without the possessor’s […]
