Black Hat & DEF CON 2018 – Tradecraft Security Weekly #28

This is the Hacker Summer Camp 2018 edition of Tradecraft Security Weekly. In this week’s episode Beau Bullock (@dafthack) talks about some of the more interesting items he saw come out of the Black Hat and DEF CON conferences this year.

Links:

• ZigDiggity – https://github.com/BishopFox/zigdiggity
• Humble Chameleon – https://github.com/claissg/humble_chameleon
• WHID Injector – https://github.com/whid-injector/WHID
• Chiron – https://github.com/aatlasis/Chiron
• ExchangeRelayX blog – https://blog.quickbreach.io/one-click-to-owa/
• ExchangeRelayX – https://github.com/quickbreach/ExchangeRelayX
• hideNsneak – https://github.com/rmikehodges/hideNsneak
• Trommel – https://github.com/CERTCC/trommel
• Param Miner – https://github.com/PortSwigger/param-miner
• Cache Poisoning Attack Blog – https://portswigger.net/blog/practical-web-cache-poisoning
• Merlin – https://github.com/Ne0nd0g/merlin
• ADRecon – https://github.com/sense-of-security/ADRecon