DocumentsDate added

Blackhat Europe 2005 - Google Hackinghot!

01.08.2005

Google Hacking For Penetration Testers slides from Blackhat 2005. Updated version of the Shmoocon 2005 talk. Added more examples, and a section or two. Don't download this and Shmoocon. This one's newer.

Hits: 17562

• Details
• Download
• View

Attack/Defend 1: DCOM, WebDAV, TTYPROMPThot!

14.08.2003

The first in perhaps a series of presentations which show common attacks along with detailed, annotated network traces. This gives a perspective on both sides of a network intrusion. The attacks are shown step-by-step, and the network traces are examined and explained at a high level. This zip file includes the actual ethereal log files and explains how to use filters to isolate important data from those log files. I try to remain technically agnostic in this presentation so technical and non-technical readers can benefit. This first installment of Attack-Defend looks at quiet and noisy nmap scans, a high-end vulnerability scanner (www.heatscanner.com), the Solaris TTYPROMPT telnet bypass (tool-less!), the Microsoft Webdav overflow, and the Microsoft RPC DCOM overflow (the attack used in the August 2003 LoveSan/Msblaster/DCOM worm!)

Hits: 14332

• Details
• Download

Attack Scenarios: Hackers in Actionhot!

21.06.2003

What it looks like when computer hackers do their thing. This presentation show step-by-step screen captures of some fairly common exploits. Linux, Solaris, and Windows platforms are used as attackers and targets. Also examined are web defacements and rootkits which can be commonly used in the field.

Hits: 29415

• Details
• Download

Analyzing 0day Hacker Toolshot!

03.02.2005

This presentation walks through the process of analyzing a never-before (publically) seen Windows backdoor/rootkit program. I show that the analysis process does not necessarily take programming skills or hardcore technical knowledge, but can be performed adequately with a handful of public tools and a decent amount of time and patience. Suited for any audience, I designed this presentation with most skill levels in mind.

Hits: 15577

• Details
• Download
• View

Advanced ICMP Techniqueshot!

15.11.2002

Using ICMP as a hacking tool. A presentation about a cool paper. Examples included.

Hits: 16497

• Details
• Download