DocumentsDate added

Attack/Defend 1: DCOM, WebDAV, TTYPROMPThot!

14.08.2003

The first in perhaps a series of presentations which show common attacks along with detailed, annotated network traces. This gives a perspective on both sides of a network intrusion. The attacks are shown step-by-step, and the network traces are examined and explained at a high level. This zip file includes the actual ethereal log files and explains how to use filters to isolate important data from those log files. I try to remain technically agnostic in this presentation so technical and non-technical readers can benefit. This first installment of Attack-Defend looks at quiet and noisy nmap scans, a high-end vulnerability scanner (www.heatscanner.com), the Solaris TTYPROMPT telnet bypass (tool-less!), the Microsoft Webdav overflow, and the Microsoft RPC DCOM overflow (the attack used in the August 2003 LoveSan/Msblaster/DCOM worm!)

Hits: 13994

• Details
• Download

Blackhat Europe 2005 - Google Hackinghot!

01.08.2005

Google Hacking For Penetration Testers slides from Blackhat 2005. Updated version of the Shmoocon 2005 talk. Added more examples, and a section or two. Don't download this and Shmoocon. This one's newer.

Hits: 16990

• Details
• Download
• View

Building the Invisible Firewallhot!

23.01.2003

A presentation on how to build a transparent bridging stateful firewall with Redhat 7.3 and up. This firewall operates on Layer 2 only so it's invisible on the network. For those non-techies- this is an invisible firewall with no IP address based on the free Redhat OS. If you hack it (or even detect it) let me know. Local console attacks don't count, slacker.

Hits: 14840

• Details
• Download
• View

Hacker Methodologieshot!

09.09.2002

A 10,000 foot view of the hacker community. Who they are, how they work... This presentation will walk you through the steps an attacker might follow, and explains the mentality and approaches of many different types of hackers from skript kiddies to defacers to professionals.

Hits: 21521

• Details
• Download
• View

Passive Information Gathering - The Risk of the Silent Attackerhot!

15.04.2000

The risk of the silent attacker. I wrote this paper for a "SANS at Night" presentation in D.C.

Hits: 10482

• Details
• Download
• View