DocumentsDate added

Building the Invisible Firewallhot!

23.01.2003

A presentation on how to build a transparent bridging stateful firewall with Redhat 7.3 and up. This firewall operates on Layer 2 only so it's invisible on the network. For those non-techies- this is an invisible firewall with no IP address based on the free Redhat OS. If you hack it (or even detect it) let me know. Local console attacks don't count, slacker.

Hits: 15634

• Details
• Download
• View

Attack Scenarios: Hackers in Actionhot!

21.06.2003

What it looks like when computer hackers do their thing. This presentation show step-by-step screen captures of some fairly common exploits. Linux, Solaris, and Windows platforms are used as attackers and targets. Also examined are web defacements and rootkits which can be commonly used in the field.

Hits: 29415

• Details
• Download

Attack/Defend 1: DCOM, WebDAV, TTYPROMPThot!

14.08.2003

The first in perhaps a series of presentations which show common attacks along with detailed, annotated network traces. This gives a perspective on both sides of a network intrusion. The attacks are shown step-by-step, and the network traces are examined and explained at a high level. This zip file includes the actual ethereal log files and explains how to use filters to isolate important data from those log files. I try to remain technically agnostic in this presentation so technical and non-technical readers can benefit. This first installment of Attack-Defend looks at quiet and noisy nmap scans, a high-end vulnerability scanner (www.heatscanner.com), the Solaris TTYPROMPT telnet bypass (tool-less!), the Microsoft Webdav overflow, and the Microsoft RPC DCOM overflow (the attack used in the August 2003 LoveSan/Msblaster/DCOM worm!)

Hits: 14332

• Details
• Download

15 minute windows security guidehot!

24.06.2004

This is a checklist for securing a Windows XP Workstation developped by Scott Granneman. I liked his checklist so much that I made it into a presentation that can be digested in about 15 minutes. In addition, I demonstrate what a hacker's attacks might look like against many of the proposed fixes. This presentation assumes no prior knowledge about Windows security.

Hits: 23425

• Details
• Download
• View

Analyzing 0day Hacker Toolshot!

03.02.2005

This presentation walks through the process of analyzing a never-before (publically) seen Windows backdoor/rootkit program. I show that the analysis process does not necessarily take programming skills or hardcore technical knowledge, but can be performed adequately with a handful of public tools and a decent amount of time and patience. Suited for any audience, I designed this presentation with most skill levels in mind.

Hits: 15577

• Details
• Download
• View