The following is the speaker line up for Jan 20 2014 ShmooCon Epilogue. Thanks to everyone who submitted talks. It was very hard to pick between all of the great talks submitted but here is the final list:
Schedule:
Talk Title/Description
|
Speaker
|
Time
|
The Allegory of the Cave: Has Application Whitelisting Coagulated As Expect?
|
Curt Shaffer & Judah Plummer
|
10:00
|
Attacker Ghost Stories: Mostly free defenses that give attackers nightmares
|
mubix
|
11:00
|
LUNCH HOUR XXXXXXXXXXXXXXXXXXXXX
|
XXXXXXXXXXXX
|
XXXXXXXXX
|
LUNCH TALK - Project Kid Hack
|
grecs
|
12:30ish
|
Hash All The Things
|
Hectaman
|
13:00
|
Password Topology - Histogram Wear Leveling
|
Hank Leininger
|
14:00
|
Statistical Probabilities
|
aricon
|
15:00 (30 min)
|
GuessWhat: Educational Malware
|
Sean Pierce
|
15:30 (30 min)
|
BACKFIL - Finding those backup files
|
Tobias McCurry
|
16:00
|
Gone Phishing and I Want My Hook Back!
|
N1tr0
|
17:00
|
DINNER HOUR XXXXXXXXXXXXXXXXXXXX
|
XXXXXXXXXXXX
|
XXXXXXXX
|
AV Evasion with the Veil Framework
|
Christopher Truncer and Harmj0y
|
19:00
|
Backup Pwnage
|
Anagogue
|
20:00 (30 min)
|
Ultrasonic Hardware Hacking
|
Aly
|
20:30 (30 min)
|
OMG HE HAXX!!: an Introduction to the Game Hacking Framework
|
Jason Haddix
|
21:00
|
Talk Descriptions:
The Allegory of the Cave: Has Application Whitelisting Coagulated As Expect?
by Curt Shaffer & Judah Plummer
Application white listing continues to be touted as a superior measure of defense against new, unseen malware and advanced threats. As such, it has become a staple in the defense of many large corporations and various departments of the government. While we understand that to properly protect hosts, more is needed beyond just simple AV. Unfortunately, we do not believe application whitelisting to be the “silver bullet” as some continue to claim, and in fact, we have seen the vendors themselves compromised this year. This leads to a false sense of security within these organizations and validates the importance of a defense-in-depth approach to protecting networks.
We will take the audience through our testing methodology, testing Bit9 Parity, Microsoft AppLocker, and McAfee Application Control. We will show how current versions of these software products are still susceptible to the old methods discussed previously and new techniques as well; due to lack of features, lack of understanding the current threat landscape, and in some cases, vulnerabilities in the software itself that allows for a complete bypass. We will end the talk by releasing a Metasploit module that incorporates the successful techniques we found so they can be utilized in penetration testing.
Attacker Ghost Stories: Mostly free defenses that give attackers nightmares
by mubix
This talk is about the tidbits that I've seen piecemeal across the multitude of businesses big and small that were innovated and highly effective, yet free, or mostly free and stopped me dead in my tracks.
Going over a number free, or nearly free methods, tactics, and software setups that will cut down intrusions significantly that you can deploy or start deployment of the hour after the talk is done.
Project Kid Hack
by grecs
Wanna teach your kid to be a hacker but don’t know where to start? Security is a fairly complex topic but games offer the best way for kids to learn the basics. This presentation not only reviews a sample of existing games that teach security fundamentals to a younger audience but also discusses a new crowdsourced project to catalog similar fun and entertaining ways to teach kids security. This project could help spur interest in later university and other programs and potentially a career … or at least make our children a more security-conscience adult in whatever field they choose.
Hash All The Things
by Hectaman
In Bro 2.2 we release the files framework- under research for the past three years, this real time streaming file analysis library gives network operators and security teams a new flexible way to work with files at both a micro and macro level- real time hashing, analysis and more will be demonstrated in the demonstration heavy presentation.
Password Topology - Histogram Wear Leveling
by Hank Leininger
PathWell is a novel approach to enforcing password complexity, designed to thwart modern cracking tools and approaches while retaining compatibility with existing enterprise authentication systems and password stores.
Recent trends in password cracking, such as the hashcat suite's mask modes, focus on common password "shapes" or topologies, such as "start with an uppercase letter, then several lowercase letters, then several digits" -> "?u?l?l?l?l?l?d?d". We find that topology use is so skewed, that exhausting the 1-5 most common topologies (out of tens of thousands to millions of possible topologies) will result in 25+% of all passwords cracking for a typical enterprise network.
PathWell is a way to audit and/or enforce topology uniqueness across an enterprise. This greatly reduces the attacker's success rate when cracking passwords, and increases their work factor to crack any sizable percentage.
The concepts apply to both medium-weak hash types, extending the effective lifespan of deployed systems, and also to systems using stronger hash types, making them even more resistant to cracking.
Statistical Probabilities
by aricon
Given the sheer amount of data the various vocations the security fields are required to digest an understanding of statistics is crucial to our accomplishment of any meaningful goals. In order to demonstrate why understanding this principles is key, examples in gather from recent events and underpinning a meaningful subset of techniques used by those in forensics, network defense, penetration testing and policy creation will be examined as to why these tools of analysis are so important for practitioners to know.
GuessWhat: Educational Malware
by Sean Pierce
Learning to quickly triage malware is undoubtedly useful and can be taught rather quickly, however an in depth malware analysis requires a non trivial amount of experience with common malware behavior and analysis tools. GuessWhat is a proof of concept game which allows hands-on training for novice malware analysts who want to expand their knowledge and experience.
BACKFIL - Finding those backup files
by Tobias McCurry
One of the key steps in web application pentesting is analyzing the application. This application helps identify any files that may have been copied to the production server.
Gone Phishing and I Want My Hook Back!
by N1tr0
It is about being able to deploy your exploits, phish your target, then keep you exploit or deployment method.
AV Evasion with the Veil Framework
by Christopher Truncer and Harmj0y
As antivirus has started to slowly increase in effectiveness, more of the payloads used during penetration tests are being caught. While the industry as a whole has demonstrated its capabilities of bypassing AV solutions in nearly all situations, valuable assessment time is often lost.
The Veil-Evasion Framework (Veil) was developed to solve this problem by offering a modular, open-source, and UI focused framework for generating AV-evading payloads in a programming language and technique agnostic way. Veil's structure greatly simplifies payload generation and allows for the integration of public and private AV evasion methods. In this talk we will go over the genesis of the framework, its structure and features, and how to develop your own payload modules. Recently released modules will also be covered, and our implementation of a lesser known shellcode injection method will be released.
We will also cover public reaction and disclosure ethics, and we plan on discussing Veil-Catapult, our payload delivery tool. Veil-Catapult extends the capabilities of the existing Veil framework by utilizing various methods to deliver and trigger payloads across targeted machines. We will conclude with a discussion of current and future mitigation strategies to combat Veil’s effectiveness.
Backup Pwnage
by Anagogue
Backup systems are an important security tool. But they're also a great way to take over an entire organization.
Ultrasonic Hardware Hacking
by Aly
Ultrasonic Testing is frequently used in the evaluation of semiconductor components used in computers, smart cards, cell phones, and other electronic components. Reverse engineering often requires tedious logic analysis or use of hazardous materials to decap devices. Ultrasonic testing is a unique alternative providing non-destructive analysis of internal structures. I’ll cover ultrasonic basics, typical testing setup, and hobbyist alternatives.
OMG HE HAXX!!: an Introduction to the Game Hacking Framework
by Jason Haddix
Some of the most prolific apps these days are video games. They are sponsored, scrutinized, monetized, and celebrated, just like many sports. They handle clients, servers, monetary transfers, social interactions, etc, with every bit the need of security that most internet hosted apps have (if not more in some cases). Join me as I release a NEW OWASP project to help classify the diverse types of game hacks that exist for some of the world’s biggest games. We'll use history as an example, and break down the flaws as much as possible, creating a do-not-do list of flaws new game companies can reference when creating new games. This is very much an alpha project, come participate and be part of history! (or something like that ;)
