EH-Net

EH-Net => News Items and General Discussion About EH-Net => Topic started by: don on March 23, 2009, 09:24:19 AM



Title: [Article]-Pen Testing Perfect Storm Pt. III: Network Reconstructive Surgery
Post by: don on March 23, 2009, 09:24:19 AM
Here's the info on tha last in this 3 part webcast series by SANS and sponsored by Core Security. As before, we will also host a post-webcast discussion with the 3 experts. Keep an eye out for the link at the top of the right column.

Permanent link: [Article]-Pen Testing Perfect Storm Pt. III: Network Reconstructive Surgery (http://www.ethicalhacker.net/content/view/247/2/)
Quote

(http://www.ethicalhacker.net/images/stories/vitals/news/perfectstorm/hurricane.jpg)
Register for Free Webcast Here! (https://www.sans.org/webcasts/show.php?webcastid=92114)


EH-Net is pleased to announce the complimentary webcast, “Network Reconstructive Surgery,” Part III of the Pen Testing Perfect Storm webcast trilogy – featuring the return of SANS Pen Testing swashbucklers Ed Skoudis, Josh Wright and Kevin Johnson. The third and final installment of this popular webcast trilogy will focus on assessing the outside-in attack process, leveraging a seemingly innocuous website bug for full-scale control over the target network infrastructure. You'll learn how to take advantage of powerful tools including Ratproxy, the soon-to-be-released Yokoso! project and a recent browser exploit, as well as how a pentester can manipulate the not-so-helpful features in enterprise wireless networking systems. Combining concepts from web app, network, wireless and social-engineering attack techniques, this webcast will present practical tips for succeeding in a penetration test in ways that exceed that of independent analysis steps. In this finale webcast, you'll also gain insight into predictions by the pentest luminary team on the future of combined penetration tests, including the concept of "no holes barred" pentesting and the effect it will have on the future of enterprise security.

The third and final webcast in this series will take place Tues March 24, 2009 @ 1:00 PM EST. Following the webcast, attendees are invited to keep the conversation going with Kevin, Josh and Ed from InGuardians (http://www.inguardians.com/) during discussions hosted by The Ethical Hacker Network (EH-Net) (http://www.ethicalhacker.net//), a free online magazine for security professionals. For at least one week after each webcast, the crew will make themselves available to answer your questions directly and candidly in EH-Net’s Community Forums (http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/). All discussions will remain freely available on EH-Net for your continued reference.


Don


Title: Re: [Article]-Pen Testing Perfect Storm Pt. III: Network Reconstructive Surgery
Post by: timmedin on March 23, 2009, 10:48:38 AM
There are a fantastic series! If you haven't check them out do it. You can find the old ones here:

Part I - Combining Network, Web App and Wireless into the Ultimate Penetration Test
https://www.sans.org/webcasts/show.php?webcastid=91601

Part II - Anatomy of a Mutiny
https://www.sans.org/webcasts/show.php?webcastid=92109


Title: Re: [Article]-Pen Testing Perfect Storm Pt. III: Network Reconstructive Surgery
Post by: former33t on April 01, 2009, 09:39:00 PM
Does anyone know where the third one was recorded at?  I have the first two and they are awesome, just missing the last one.

Thanks.


Title: Re: [Article]-Pen Testing Perfect Storm Pt. III: Network Reconstructive Surgery
Post by: timmedin on April 02, 2009, 12:48:40 PM
Part III
https://www.sans.org/webcasts/show.php?webcastid=92114


Title: Re: [Article]-Pen Testing Perfect Storm Pt. III: Network Reconstructive Surgery
Post by: former33t on April 02, 2009, 11:21:31 PM
timmedin,

Maybe I'm missing something, but that's the same link I went to for registration last time looking for the archived session.  I missed it and got sent a registration email instead.  The registration email has links to download the original two webcasts, but not the third.  The only link for the third webcast is to actually attend in real time and it isn't functional.  Does anyone know if there is a recording of this posted somewhere?

Thanks.


Title: Re: [Article]-Pen Testing Perfect Storm Pt. III: Network Reconstructive Surgery
Post by: Jhaddix on April 15, 2009, 02:31:44 PM
These are the correct links:

•  Webcast recording:

https://coresecurity.webex.com/coresecurity/lsr.php?AT=pb&SP=EC&rID=7322987&rKey=1231C582ECF723AE

 

•  Slide presentation:

https://coresecurity.webex.com/coresecurity/lsr.php?AT=pb&SP=EC&rID=7325532&rKey=41C163EE4464BA8F


Title: Re: [Article]-Pen Testing Perfect Storm Pt. III: Network Reconstructive Surgery
Post by: timmedin on April 27, 2009, 09:10:31 PM
In the example here a reverse shell was established from the user to the attacker. Is there a tool to allow you to proxy requests through that shell? I don't mean uploading a proxy, but one that uses something like the telnet command to request pages.