DEFCON ONE MENTALITY UPDATE
DEFCON ONE MENTALITY PRO
DEFCON ONE MENTALITY PROFESSIONAL

Jeff Moss’ request for the Federal Government to remove themselves from the conference was deeply controversial in the info sec community – especially considering that he and his DEFCON staff have deep ties to the U.S. Government was doing it – although perhaps the tinfoil hat was overkill. “I owe an apology to every crazy person I’ve ever met who was obsessed with the idea the government was listening to them and recording their every online activity.” The feeling of betrayal by the Federal government was evident from regular sarcastic remarks during the event and, more specifically, in the words of one presenter at DEFCON, This year Jeff Moss, the founder of Black Hat and DEFCON, asked the Federal government to remove itself from the conference. The ACLU was quick to identify that the NSA’s unfettered surveillance activity may violate the judicial privilege of the Attorney Client relationship one of the most important foundations of the American criminal justice system. Defending your network against malware and exploit has come to include discussions around confidentiality. The complicity of telecommunication companies, Internet Service Providers, Google, Facebook and Twitter has impacted heavily on the psyche of those which maintain, implement and fix the Internet. Whether hailed as a hero or reviled as a villain, his controversial revelations about PRISM shook the very foundations of the Internet. Government has been diligent in trying to maintain the narrative of “surveillance is necessary for the security of the state.” In their estimate, this may in fact be the case, but many in the groups I talked with have challenges embracing this notion.

DEFCON ONE MENTALITY PROFESSIONAL

As a security professional and former intelligence analyst, these security conferences only confirmed to me that our digital world is fragile, wounded and in need of – if you talk to the American Civil Liberties Union (ACLU) or Electronic Frontier Foundation (EFF) – an ethical reboot. More than 15,000 IT security practitioners shared their thoughts on the complex, challenging and ever-evolving digital world. He can be found on Twitter and in Room 362.LAS VEGAS, NV - Throughout the last week of July and the first week of August (encompassing Black Hat, B-Sides, IOactive and the “mother of all security conventions” DEFCON ) there were easily thousands of discussions and presentations on security. * Rob Fuller is a security researcher and pen-tester. Description: An advanced network flow visualization tool that is not soley based on time.Email Address: – by Ponte Technologies.Description: A browser plugin that pen-tests every site that you visit.

Description: VoIP automated fuzzing tool with support for a large number of VoIP applications and protocols.Description: A script that can hide other scripts such as CSRF and iframes in spaces and tabs.Description: A Rouge Server with Controlling Desires that steals NTLM hashes.Description: A tool for organizing and sharing information during a penetration test.Email Addresses: and – by John Fitzpatrick.

DEFCON ONE MENTALITY PRO

Description: An IDA Pro plugin with a server backend that allows multiple people to collaborate on a single RE (reverse engineering) project.Email Addresses: and – by Chris Eagle and Tim Vidas.Description: A SLAX based Linux Distro that is geared toward data/log visualization.Description: A web site that is dedicated to helping you break out of Kiosk jails.IKat – interactive Kiosk Attack Tool (This site has an image as a banner that is definitely not safe for work! – You have been warned) by Paul Craig Description: Web Application scanner that searches for logic and design flaws as well as the standard flaw seen in the wild today (SQL Injection, XSS, CSRF).Description: A SCADA Modbus Network Scanner.Description: A Tor-like protocol that fixes some of Tor’s major attack vectors.Email Address: Phantom Protocol – by Magnus Brading.Description: A Blind SQL Injection tool based on heavy queries.Description: An open source inline “transparent” client-side IPS.Description: The end-all be-all of MITM tools.Description: An open source wireless IDS program.

DEFCON ONE MENTALITY UPDATE

If any of the information is inaccurate, or a tool is missing, please contact me and I will update this post.īeholder – by Nelson Murilo and Luis Eduardo After a weekend of googling (which came back with few results) and making contact with some of the speakers, I provide you with a mostly accurate list of 'stuff' that was released at DEFCON this year. Before anyone has a chance to post 'it's all on the DEFCON CD dummy,' I want to challenge them to try.

Defcon one mentality