EH-Net

Columns => Gates => Topic started by: LSOChris on March 15, 2009, 09:40:15 PM

Title: SOURCE Boston Attacking Layer 8: Client-Side Penetration Testing Presentation
Post by: LSOChris on March 15, 2009, 09:40:15 PM

SOURCE Boston Attacking Layer 8: Client-Side Penetration Testing Presentation

I've uploaded the video to vimeo, its available on the channel we set up

http://vimeo.com/channels/fullscopesecurity

or direct http://vimeo.com/3665163

Title: Re: SOURCE Boston Attacking Layer 8: Client-Side Penetration Testing Presentation
Post by: Dark_Knight on March 15, 2009, 10:40:55 PM

Thanks Chris. Very good presentation.

Title: Re: SOURCE Boston Attacking Layer 8: Client-Side Penetration Testing Presentation
Post by: xXxKrisxXx on March 16, 2009, 02:40:12 AM

Just watched the whole thing, those fileformat exploits in metasploit get the job done. Nice work though, you sounded kinda thirsty. :P

Title: Re: SOURCE Boston Attacking Layer 8: Client-Side Penetration Testing Presentatio
Post by: hayabusa on March 17, 2009, 11:08:23 AM

Great video, Chris!

I've been harping on both my current employer, as well as many of my private clients, about client-side attack vectors, and the MANY weaknesses I've seen to that regard. I need to forward that link to a few of them, who really need an awakening, as, while I've shown them some things, they just never accept that it's becoming the 'norm' for these attacks to open the door to further penetrate an otherwise 'impenetrable' environment.

Thanks, much!

Title: Re: SOURCE Boston Attacking Layer 8: Client-Side Penetration Testing Presentatio
Post by: LSOChris on March 19, 2009, 01:29:11 PM

thanks!! hopefully it will help get the word out

Title: Re: SOURCE Boston Attacking Layer 8: Client-Side Penetration Testing Presentation
Post by: jason on March 19, 2009, 08:05:18 PM

Awesome. Added it to my list of things to watch.