HomeCalendarCertificationsColumnsFeaturesForumResourcesVitals
 
Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.
Lost Password?
No account yet? Register
Who's Online
We have 43 guests and 1 member online
 
Advertisement

You are here: Home arrow EH-Netarrow Special Eventsarrow Q&A for Pen Testing Perfect Storm Part II: Client-Side Mutiny
EH-Net
May 20, 2013, 09:04:17 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1] 2   Go Down
« previous next »
  Print  
Author Topic: Q&A for Pen Testing Perfect Storm Part II: Client-Side Mutiny  (Read 30445 times)
0 Members and 1 Guest are viewing this topic.
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 4165


Editor-In-Chief


View Profile WWW
« on: January 14, 2009, 12:25:05 AM »
This is the place to be following Part II of this webcast series that took place at 1:00 PM EST on Wednesday January 21, 2009:

Pen Testing Perfect Storm Pt. II: Anatomy of a Client-Side Mutiny

EH-Net members are invited to keep the conversation going with Kevin Johnson, Josh Wright and Ed Skoudis from InGuardians. These 3 security experts will be with us for about a week (depending on their time constraints) after each webcast to answer your questions. We will also post the links to webcasts as they become available.

If you are not an EH-Net Member, please register now to post questions.

Feel free to ask away...

Many thanks to SANS and Core Security for making this possible,
Don
EH-Net
Editor-in-Chief
Logged
CISSP, MCSE, CSTA, Security+ SME
Andrew Waite
Hero Member
*****
Offline Offline

Posts: 928



View Profile WWW
« Reply #1 on: January 21, 2009, 01:13:08 PM »
Ed, Kevin & Josh,

thanks for the talk, really enjoyed it.

I'm looking forward to getting the archived talk and presentation slides as there was far too much information to take in in one go (that isn't a criticism, please keep it up).

Can't wait for part 3

RR
Logged
-- http://www.infosanity.co.uk
-- http://blog.infosanity.co.uk
vijay2
Full Member
***
Offline Offline

Posts: 220


View Profile
« Reply #2 on: January 21, 2009, 01:33:28 PM »
It was a great talk as usual, enjoyed and learned a lot.

Thanks  Guys

VJ
Logged
GPEN GCFA GCIH CISSP CISA GSEC OSCP C|EH Security+
edskoudis
Newbie
*
Offline Offline

Posts: 10


View Profile
« Reply #3 on: January 22, 2009, 07:06:16 AM »
VJ and RR,

Thank you for your kind words.  Much appreciated.

We had a wonderful time on the webcast yesterday.  Thanks to everyone who took time out of their schedule to join us.

--Ed.
Logged
KevinInGuardians
Newbie
*
Offline Offline

Posts: 15


View Profile
« Reply #4 on: January 22, 2009, 10:39:48 AM »
I would like to second Ed's thanks for the kind words and I am looking forward to the conversations starting here.

Kevin
Logged
mtgarden
Newbie
*
Offline Offline

Posts: 14


View Profile
« Reply #5 on: January 22, 2009, 10:53:21 AM »
Where would I find an older/vulnerable version of Joomla to test with w3af?  Setting up a VMWare environment: Debian etch LAMP to host Joomla and a Samurai machine as a pentesting environment.

Thanks.
Logged
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1057


aka dynamik


View Profile WWW
« Reply #6 on: January 22, 2009, 12:14:43 PM »
Here: http://joomlacode.org/gf/project/joomla/frs/?action=index
Logged
WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
mtgarden
Newbie
*
Offline Offline

Posts: 14


View Profile
« Reply #7 on: January 22, 2009, 12:18:53 PM »
those are only patches to the current version.  I wanted an install of an old code base.
Logged
vijay2
Full Member
***
Offline Offline

Posts: 220


View Profile
« Reply #8 on: January 22, 2009, 01:59:16 PM »
Ed / Don / Kevin

It would be really helpful if one of you guys would post all the links (tools)  from the last slide on here.

Thanks
Logged
GPEN GCFA GCIH CISSP CISA GSEC OSCP C|EH Security+
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1057


aka dynamik


View Profile WWW
« Reply #9 on: January 22, 2009, 02:11:52 PM »
Whoops, sorry. I thought those were included.

Here's version history for 1.5, but I'm not seeing something similar for 1.0: http://docs.joomla.org/Joomla_1.5_version_history
Logged
WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
mtgarden
Newbie
*
Offline Offline

Posts: 14


View Profile
« Reply #10 on: January 22, 2009, 02:22:10 PM »
Thanks.
Logged
hendricm
Newbie
*
Offline Offline

Posts: 2


View Profile
« Reply #11 on: January 22, 2009, 03:31:01 PM »
Great presentation yesterday!  I had one question, has the program AirCSRF, “Air-Sea-Surf”, by Garland Glessner, been released yet? 

Thanks!

-Matt
Logged
CISSP, CCNA
vijay2
Full Member
***
Offline Offline

Posts: 220


View Profile
« Reply #12 on: January 23, 2009, 07:52:48 AM »
Now that we have received the archived webcast here are the links to the tools and resources discussed in the webcast

VistaRFMON and nm2lp - www.inguardians.com/tools

Vista Wireless Power Tools Paper - www.inguardians.com/pubs/articles.html

Nethelper - winunix.mkreddys.com

W3af - w3af.sourceforge.net

Samurai - samurai.inguardians.com

Thanks

VJ
Logged
GPEN GCFA GCIH CISSP CISA GSEC OSCP C|EH Security+
edskoudis
Newbie
*
Offline Offline

Posts: 10


View Profile
« Reply #13 on: January 23, 2009, 11:40:39 AM »
Thanks, VJ, for posting those links... much appreciated.

We'll get answers to your other questions up (regarding old Joomla versions and AirCSRF availability) soon.

Thanks again to all--
--Ed.
 
Logged
KevinInGuardians
Newbie
*
Offline Offline

Posts: 15


View Profile
« Reply #14 on: January 23, 2009, 12:21:33 PM »
Quote from: mtgarden on January 22, 2009, 10:53:21 AM
Where would I find an older/vulnerable version of Joomla to test with w3af?  Setting up a VMWare environment: Debian etch LAMP to host Joomla and a Samurai machine as a pentesting environment.

Thanks.

Joomla 1.0 is available here:
http://joomlacode.org/gf/project/joomla/frs/?action=FrsReleaseBrowse&frs_package_id=3365

You can then update to what ever version using the patches.

Kevin
Logged
Pages: [1] 2   Go Up
  Print  
« previous next »
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com 		Valid XHTML 1.0! Valid CSS!
Page created in 0.082 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.