DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER...

33
building the @shortxstack @sethlaw

Transcript of DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER...

Page 1: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

building the

@shortxstack@sethlaw

Page 2: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

intros

· whitney champion

· senior systems engineer

· https://unicorns.lol

· @shortxstack

· seth law

· appsec consultant

· https://redpointsecurity.com

· @sethlaw

Page 3: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

inception

Page 4: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

what hadhappened was...

Page 5: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

androidv1.0

Page 6: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

iOS v1.0

Page 7: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

it’sofficial

Page 8: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

pain points

Page 9: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

scheduling

Page 10: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

don’t trusthax0rs

Page 11: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

bug fixesat all hours

Page 12: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

finding time

Page 13: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

waiting on[REDACTED]

Page 14: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

overhaul

Page 15: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

kotlinoverhaul

Page 16: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

ui redesign

Page 17: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

multipleconferences

Page 18: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

high points

Page 19: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

easter eggs

Page 20: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

attendee feedback

Page 21: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

communityinvolvement

Page 22: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

lessons learned

Page 23: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

haters gonna hate

Page 24: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

githubissues

Page 25: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

waiting on[REDACTED]

Page 26: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

backupplans

Page 27: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

going forward

Page 28: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

morestreamlined

Page 29: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

iOS/androidparity

Page 30: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

schedulingapp

Page 31: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

moreconferences

Page 32: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

feedbackis always welcome :)

Page 33: DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEFCON-26... · 12:46 PM HACKER TRACKER 2016-06-20 Welcome to Hacker Tracker iOS version DEF If you have any events,

questions?thank you <3

@shortxstack@sethlaw


DEF CON 25 Hacker Conference CON 25/DEF CON 25... · 2020. 5. 16. · Programs x 2 web targets per bounty (average) Ie. targets: , forums.defcon.org, ... Sort by recurring instances

DEF CON 25 Hacker Conference CON 25/DEF CON 25... · 2020. 5. 16. · Programs x 2 web targets per bounty (average) Ie. targets: , forums.defcon.org, ... Sort by recurring instances

DEF CON 26 Hacking Conference CON 26/DEF CON 26 workshops/DEF C… · Bryce Kunz - Stage 2 Security, Red Teaming & Splunk Security Services. CNO.io Kevin Lustic & Bryce Kunz (@TweekFawkes)

DEF CON 26 Hacking Conference CON 26/DEF CON 26 workshops/DEF C… · Bryce Kunz - Stage 2 Security, Red Teaming & Splunk Security Services. CNO.io Kevin Lustic & Bryce Kunz (@TweekFawkes)

DEF CON 25 Hacker Conference

DEF CON 25 Hacker Conference

You’re Just Complaining Because You’re Guilty CON/DEF CON 26/DEF CON 26...You’re Just Complaining Because You’re Guilty: A DEF CON Guide to Adversarial Testing of Software

You’re Just Complaining Because You’re Guilty CON/DEF CON 26/DEF CON 26...You’re Just Complaining Because You’re Guilty: A DEF CON Guide to Adversarial Testing of Software

DEF CON 26 Hacking Conference - infocon.org CON/DEF CON 26/DEF CON... · Bryce Kunz - Stage 2 Security, Red Teaming & Splunk Security Services. CNO.io Kevin Lustic & Bryce Kunz (@TweekFawkes)

DEF CON 26 Hacking Conference - infocon.org CON/DEF CON 26/DEF CON... · Bryce Kunz - Stage 2 Security, Red Teaming & Splunk Security Services. CNO.io Kevin Lustic & Bryce Kunz (@TweekFawkes)

DEF CON 25 Hacker Conference CON 25/DEF CON 25... · Contents Introduction 5 WSUSandnetworkarchitecture 7 1.1 Architecturespresentation 7 1.2 Autoapprovedupdates 10 1.3 Stateoftheart-WSUSpectandtechnicallimitations

DEF CON 25 Hacker Conference CON 25/DEF CON 25... · Contents Introduction 5 WSUSandnetworkarchitecture 7 1.1 Architecturespresentation 7 1.2 Autoapprovedupdates 10 1.3 Stateoftheart-WSUSpectandtechnicallimitations

DEF CON 25 Hacker Conference CON 25/DEF CON 25 presentations/DEF CON 25... · Why Network Sends Paging on 2G • Cellphone stays in 4G • Network sends paging message in 4G LTE PCH.But

DEF CON 25 Hacker Conference CON 25/DEF CON 25 presentations/DEF CON 25... · Why Network Sends Paging on 2G • Cellphone stays in 4G • Network sends paging message in 4G LTE PCH.But

USB for all! - DEF CON · Title: USB for all! Author: Jesse Michael, Mickey Shkatov Subject: DEF CON 22 Presentation Materials Keywords: Jesse Michael, Mickey Shkatov, Hacker, Security

USB for all! - DEF CON · Title: USB for all! Author: Jesse Michael, Mickey Shkatov Subject: DEF CON 22 Presentation Materials Keywords: Jesse Michael, Mickey Shkatov, Hacker, Security

DEF CON 26 Hacking Conference - DEF CON Media Server CON 26/DEF CON 26 presentations/DEF… · started in late 2017 to prepare for the 2018 CCDC season. We ended up using the BETA

DEF CON 26 Hacking Conference - DEF CON Media Server CON 26/DEF CON 26 presentations/DEF… · started in late 2017 to prepare for the 2018 CCDC season. We ended up using the BETA

How to Hack Millions of Routers - DEF CON · PDF fileHow to Hack Millions of Routers Author: Craig Heffner Keywords: Defcon, DEF CON, Hacker,Security Conference, Presentations,Technology,Phreaking,Lockpicking,hackers

How to Hack Millions of Routers - DEF CON · PDF fileHow to Hack Millions of Routers Author: Craig Heffner Keywords: Defcon, DEF CON, Hacker,Security Conference, Presentations,Technology,Phreaking,Lockpicking,hackers

DEF CON 25 Hacker Conference CON 25/DEF CON 25... · Ghost Telephonist Impersonates You Through LTE CSFB Yuwei ZHENG, Lin HUANG Qing YANG, Haoqi SHAN, Jun LI UnicornTeam, 360 Technology

DEF CON 25 Hacker Conference CON 25/DEF CON 25... · Ghost Telephonist Impersonates You Through LTE CSFB Yuwei ZHENG, Lin HUANG Qing YANG, Haoqi SHAN, Jun LI UnicornTeam, 360 Technology

Mobile Hacker Spaces - DEF CON · Mobile Hacker Space • Used Buses – Minibus Chevy 3500 Diesel 1999 USD $15,900 – Charter bus Chevy P-30 1995 USD $4000 – Minibus GMC Shuttle

Mobile Hacker Spaces - DEF CON · Mobile Hacker Space • Used Buses – Minibus Chevy 3500 Diesel 1999 USD $15,900 – Charter bus Chevy P-30 1995 USD $4000 – Minibus GMC Shuttle

DEF CON 25 Hacker Conference CON 25/DEF CON 25 presentations/DEF… · $ python c2960-lanbasek9-m-12.2 ... DEF CON 25 Hacker ... Subject: DEF CON 25 Presentation Keywords: DEF CON

DEF CON 25 Hacker Conference CON 25/DEF CON 25 presentations/DEF… · $ python c2960-lanbasek9-m-12.2 ... DEF CON 25 Hacker ... Subject: DEF CON 25 Presentation Keywords: DEF CON

Starting the Avalanche - DEF CON CON 25/DEF CON 25 presentations/DEF… · Starting the Avalanche: Application DoS ... DEFCON, Speeches, Hacking, Hackers, Hacker Conference, Computer

Starting the Avalanche - DEF CON CON 25/DEF CON 25 presentations/DEF… · Starting the Avalanche: Application DoS ... DEFCON, Speeches, Hacking, Hackers, Hacker Conference, Computer

DEF CON 26 Voting Village - DEF CON® Hacking Conference CON 26 voting... · 2018-09-27 · DEF CON 26 Voting Village Report on Cyber Vulnerabilities in U.S. Election Equipment, Databases,

DEF CON 26 Voting Village - DEF CON® Hacking Conference CON 26 voting... · 2018-09-27 · DEF CON 26 Voting Village Report on Cyber Vulnerabilities in U.S. Election Equipment, Databases,

Building a Security Operations Center - DEF CON · PDF fileBuilding a Security Operations Center Author: Josh Pyorre Keywords: Defcon, DEF CON, Hacker,Security Conference, Presentations,Technology,Phreaking,Lockpicking

Building a Security Operations Center - DEF CON · PDF fileBuilding a Security Operations Center Author: Josh Pyorre Keywords: Defcon, DEF CON, Hacker,Security Conference, Presentations,Technology,Phreaking,Lockpicking

HAM FOR HACKERS - DEF CON · PDF fileHandheld radio Cell phone FM ... Ham for hackers ... Keywords: Defcon, DEF CON, Hacker,Security Conference,Presentations,Technology,Phreaking

HAM FOR HACKERS - DEF CON · PDF fileHandheld radio Cell phone FM ... Ham for hackers ... Keywords: Defcon, DEF CON, Hacker,Security Conference,Presentations,Technology,Phreaking

Burner Phone DDOS 2 dollars a day : 70 Calls a Minute CON 22/DEF CON 22 presentations/West… · This Prepaid Cell Phone Can Deny ... DEF CON, Hacker, Security Conference, Presentations,

Burner Phone DDOS 2 dollars a day : 70 Calls a Minute CON 22/DEF CON 22 presentations/West… · This Prepaid Cell Phone Can Deny ... DEF CON, Hacker, Security Conference, Presentations,

Last mile authentication problem - DEF CON CON 26/DEF CON 26...Last mile authentication problem Exploiting the missing link in end-to-end secure communication DEF CON 26 Our team Sid

Last mile authentication problem - DEF CON CON 26/DEF CON 26...Last mile authentication problem Exploiting the missing link in end-to-end secure communication DEF CON 26 Our team Sid

Bypass firewalls, application white ... - media.defcon.org CON 22/DEF CON 22 presentations... · DEF CON 22, 2014. Hungary. root@ ... ... DEFCON, DEF CON, Hacker, Security Conference,

Bypass firewalls, application white ... - media.defcon.org CON 22/DEF CON 22 presentations... · DEF CON 22, 2014. Hungary. root@ ... ... DEFCON, DEF CON, Hacker, Security Conference,