Nessus Report Hacking at December NoVA Hackers

Jason Oliver Talks Nessus Report Hacking at NoVa Hackers Dec 2010 from Georgia Weidman on Vimeo.

Blended Threats at December NoVA Hackers

Blended Threats by EvilFingers NoVa Hackers December 2010 from Georgia on Vimeo.

ReverseSpace opening announcement at December NovaHackers

Reverse Space Opening Announcement NoVa Hackers Dec 2010 from Georgia on Vimeo.

Armitage the Metasploit GUI at December NoVA Hackers

Armitage Demo NoVa Hackers December 2010 from Georgia on Vimeo.

December Meeting 13 December 2010

Dinner Meeting Monday 13 Dec 2010 at 6:00PM
Inflow 5:30PM - Start ~6:00PM
Location:
ICF International, 9300 Lee Highway, Fairfax
Google Map

Barrelfish @ November NoVAH! Meeting

NoVa Hackers Nov. 2010 Barrelfish Andrew from Georgia on Vimeo.

SSH Patching @ November NoVAH! Meeting

NoVa Hackers Nov. 2010 SSH Patching Nicholas B. from Georgia on Vimeo.

Want to see what's happening at the NoVA Hackers Meeting?!

We finally recorded some of the talks from the last meeting.

you can see @theharmonyguy's talk here

http://www.grmn00bs.com/2010/10/06/georgias-first-attempt-to-be-a-videographer

or below

November Meeting: Monday Nov 15th 2010

Dinner Meeting Monday Nov 15th 2010 at 6:00PM
Inflow 5:00PM - Start ~6:00PM
Location:
ICF International, 9300 Lee Highway, Fairfax
Google Map

October Meeting 4 Oct 2010

Dinner Meeting Monday 4 Oct 2010 at 6:00PM
Inflow 5:30PM - Start ~6:00PM
Location:
ICF International, 9300 Lee Highway, Fairfax
Google Map

October Meeting: Monday, 4th, 2010

October equals same place usual time but different beer.

Meeting Summary: Sep 13 2010 - 0x0006

1) Lucas; presented on 'data leakage in the microsoft office customer improvement program'. Demo'd out how microsofts program stores data from documents and e-mails that could leak sensitive information.

2) Rob 'Mubix'; presented on memory forensics for pentesters.

3) Rich 'Warewolf'; presented on Regripper and its useful plugins for forensics.

4) Jason; presented on his adventures and experience in FIPS 200 compliance from a sysadmins and testers pov

5) Tiffany; presented on the upcoming opening of ReverseSpace and her adventures therein

6) Nick; presented on basics in malware analysis using ida pro

7) Gerry; presented on some plans for local CTF competitions

8) Lucas; gave a short plug for sec jobs with ICF ... Lucas as your boss! Scary ...

9) Jim; presented on Gibsons and how they are used to overturn oil tankers a.ka. IBM zenterprise and associated architecture.

September Meeting 13 Sep 2010

September Meeting will be 13 Sept at the usual location and time.

Meeting Summary: Aug 9 2010 - 0x0005

1) Rob 'Mubix' ; presented on railgun extension to meterpreter, practical uses and advanced fun.

2) Richard ; presented on deploying asterisk with zero knowledge and the challenges and successes therein.

3) Tuna and Matt ; wifi exploitation through karma, karmetasploit, iptables foo and sslstrip. Coffee houses, hotels, and airports beware.

4) Joe K ; presented on some personal insights into the cyveillance report (http://www.cyveillance.com/web/news/press_rel/2010/2010-08-04.asp) he worked on detailing the lag time in detection of malware from major av vendors. Also presented on his research into game theory and its uses in determining risk and identifying areas to take action.

5) Ben & Jonathan ; presented on their reaching the final round of defcon ctf and not placing last

6) Nick ; presented on building a toolkit for basic triage in regards to incident response.

7) Lucas ; presented on his current research into security visualization as an aid to detection and analysis.

August Meeting: 9 August 2010

Dinner Meeting Monday 9 Aug 2010 at 6:00PM
Inflow 5:30PM - Start ~6:00PM
Location:
ICF International, 9300 Lee Highway, Fairfax
Google Map

No July Meeting

No July Meeting, see everyone after B-Sides, Blackhat and Defcon

Meeting: 2010.06.10 0x0004

The 5th NoVA Hackers (0x0004) meeting was 10 June 2010.

Speaker Notes:

1) Grecs on his 'securing macs' presentation - POV of a non mac user coming up to speed on what are the best things he can do/use to secure and lockdown a stock mac.

2) cktricky with his dynamic code analysis of android apps. Cool lil demo of his tool set and some awesome window moving fu.

3) Julie and her discussion on the finer points of performance testing as it relates to network load and througput. Interesting sub discussion on product testing.

4) TheX1le and hp printer owning foo over pjl. HP printers as stealth storage and persistence devices. APT! No roflcopters were harmed in the making of this presentation. (this was hilarious btw)

5) Tuna with an update to using U3 as an attack vector by subverting the applications it hosts. Namely using open office to pop a box.

6) Tuna plus IamEd in using unreleased python enabled phone fu to spam lucas' cell into oblivion. Subsequent discussion of theoretical scanning devices that can be used to grab phone numbers in the immediate area OTA.

7) Joe and his always scary IPv6 talks focusing on common and uncommon tunnels he has encountered. ipv6 over udp over ssh over https over ipv4 burned to a cd and fedex'd to your core switch ... I think joe needs to redo this one since we were pushing the clock and he barely got going with the good stuff ...

-thanks to Chris S. for the wrapup

NoVA Hackers Metasploit Workshop CFP is open

On Saturday, September 18^th 2010 NoVAHA! is hosting a Metasploit training event. Participation is our only rule in the group and it will be no different with this event. Presenters, your paper must meet 1 guideline to be considered:

1. Your class must be hands on. You are not required to bring VMs or test environments for the attendees, however your submission must include what they are going to need, down to the OS/Software/Configuration level for them to be able to attempt to follow along if they so desire. (Even if this means they need Enterprise software/hardware, it at least needs to be in the notification for the class)

Email all responses and inquires to: novaha.cfp@gmail.com

CFP Ends: 20 August 2010

Please follow the prescribed submission format. Please, no attachments, including one may result in your submission being discarded as spam (jack..)

You DO NOT need to be a member to submit and be accepted to give a class.

Name/Handle:
Title of Class:
Generic Topic:
Attendee Requirements:
Talk-Time / Lab-Time breakup (1 or 2 hours total):
Outline:

Event will be held graciously at the ICF building in Fairfax VA, address is below:

ICF International

9300 Lee Highway

Fairfax, VA 22031 USA

Meeting: 2010.05.13 0x0003

The 4th NoVA Hackers (0x0003) meeting was 13 May 2010.

Speaker Notes:

Jason Oliver - Testing Changes in Fed space AKA 800-53 Rev3/800-53a Rev1

http://www.blackhat.org/Site/Blog/Entries/2010/3/14_Random_Samples.html
http://www.blackhat.org/Site/Blog/Entries/2010/3/14_Random_Samples_files/sampler.java

Bill Gross - Nukes and Me, a love hate relationship
DaKahuna - Metasploit Express Beta Demo
Matt Ahrens - Forescout fails more than Facebook
Michael Smith - BGP and DNS... The Internet is falling! The Internet is falling!
Nicholas B - Javascript Cross Site Scanning

https://www.bordergatewayprotocol.net/aricon/presentations/The_future_is_here_.pdf
https://www.bordergatewayprotocol.net/aricon/software/python/xmlhttpscanner/xmlhttpscanner.py

Richard Harman - Poorcase: Needle & Thread for forensic disk images

http://code.google.com/p/poorcase/
http://code.google.com/p/poorcase/downloads/list

Nick Harbour - fucking with windows binaries
Joe Klein - More IPv6 fail

May Dinner Meeting 13 May 2010

May Dinner Meeting

Dinner Meeting 13 May 2010 at 6:00PM
Inflow 5:30PM - Start ~6:00PM
Location:
ICF International, 9300 Lee Highway, Fairfax
Google Map

Meeting: 2010.04.15 0x0002

The 3rd NoVA Hackers (0x0002) meeting was 15 April 2010.

Speaker Notes:

@cktricky and @jack_mannino talked about Low Tech Hacking
@wadew talked about reversing on the android OS
@Falconsview talked about B-Sides
@llsecurity talked about GPS forensics
@carnal0wnage talked about metasploit and lotus domino
@theharmonyguy talking about Facebook hacking
Brett T. talked about ipv6 basics
@mubix talked about ipv6 offensive operations

A couple of presenters posted their slides in the files section of the NoVA Hackers group. Group members should have access to them, otherwise you should have been there.

April Dinner moved

Just a quick mod, we've moved the Dinner meeting for April to the 15th. (Voted on via the mailing list)

April 2010 NoVA Hackers Meetings

The NoVA Hackers April meetings will be:

Dinner Meeting 15 April 2010 at 6:00PM
Inflow 5:30PM - Start ~6:00PM
Location:
ICF International, 9300 Lee Highway, Fairfax
Google Map

Lunch Meeting 29 April 2010 at 11:45AM
Inflow 11:30AM - Start ~11:45AM
Location:

China Garden, 1100 Wilson Blvd, Arlington, VA 22209, (703) 525-5317
Google Map

Which is near the Rosslyn metro exit in the Channel 7 building, at the top of the escalators.

Meeting: 2010.03.08 0x0001

Meeting: 2010.03.08 0x0001

Grecs posted a nice wrap up to the March Dinner/Talks.

You can check it out here:

http://www.novainfosecportal.com/2010/03/10/nova-hackers-dinner-wrap-up/

Short Version:

elwing gave an overview of CACert.
mubix talked about DNS IP Contra
carnal0wnage talked about Nmap XML/Ruby/Postgres
kingtuna talked about Metasploit and USB attacks.

sorry no slides, you should have been there :-)

March NoVA Hackers Dinner Meeting

The next NoVA Hackers dinner meeting will be Monday 8 March 2010

Inflow 4:30PM - Start ~5:00PM

NEW LOCATION: Google Maps - CLICK HERE

Which is a stones throw from the Vienna metro exit.

The plan is to have several 5-10 minute talks so please respond to the email thread if you are interested in talking.

February NoVA Hackers Lunch Meeting

The next NoVA Hackers lunch meeting will be Thursday 25 February 2010

Inflow 11:30AM - Start ~11:45

China Garden

1100 Wilson Blvd

Arlington, VA 22209

(703) 525-5317

Which is near the Rosslyn metro exit in the Channel 7 building, at the top of the escalators.

The lunch meetings happen on the last Thursday of the month. Next meeting being February 25th.

February Dinner (Mon) Canceled

the Shmoo dinner has been canceled due to the noteworthy / tireless / thankless ****** job our wonderful VDOT is doing + the amazingly acrobatics of DC/VA/MD drivers.

We are working on a possible reschedule date, but there is always next month...

Thanks,

NoVA Hackers is back!

Well, at least it's now a reality in web form. The NoVA hackers mailing list has been thriving for the last 3 months with over 1400 messages posted and 79 active members with topics ranging from advanced malware analysis and forensics to job opportunities and barcode analysis.

That group can be found at: http://groups.google.com/group/novahackers

It is an invite only group, but any member may invite. We have evening meetings once a month on the second Monday of the month. We will still be having our meeting in February on the 8th with the intention that people who might not be leaving suddenly can come and check out the meeting. These dinner meetings have at least one presentation and are currently hosted at:

Inflow 4:30PM - Start ~5:00PM

Glory Days Grill

3059 Nutley Street, Fairfax, VA 22031-1931

which is a stones throw from the Vienna metro exit.

We also have lunch meetings which are less formal and more centrally located:

Inflow 11:30AM - Start ~11:45

China Garden

1100 Wilson Blvd

Arlington, VA 22209

(703) 525-5317

which is near the Rosslyn metro exit in the Channel 7 building, at the top of the escalators.

The lunch meetings happen on the last Thursday of the month. Next meeting being January 28th.

We have opened up the web site for members to post about the meetings, about conversations they have on the list, or other topics that relate to information security in the NoVA/DC area.

We follow the AHA set of rules which you can check out charter out for more details on, but basically boils down to:

You must contribute. (via posts, mailing list, questions, or presentations)

Meeting: 2010.01.11 0x0000

The 1st NoVA Hackers (0x0000) meeting was 11 Jan 2010.

Speaker Notes:

Mike Smith talked about barcodes for our first Nova Hackers Meeting

Info here:
http://www.guerilla-ciso.com/archives/1481