conspiracy theory? or reality? 3/talks/rootcon 3... · 2017. 3. 21. · reports of smw2 and sunu13...

trusting opendns? conspiracy theory? or reality?

Upload: others

Post on 20-Sep-2020

0 views

Category:

Documents

0 download

Report

Download

Embed Size (px):

TRANSCRIPT

trustingopendns?

conspiracytheory?orreality?

topic

• who/why/when[threat]?• proof-of-concept[facebook.com]• otherrelatedissues

Page 3: conspiracy theory? or reality? 3/Talks/ROOTCON 3... · 2017. 3. 21. · reports of SMW2 and sunu13 are out FLAG and T GN seems to be not had any issues so far It seems at tffis point,

opendns http://www.opendns.com/

• makeyournetworksafer,faster,smarter,andmorereliable.– rock-solidsecurity– dns infrastructure– intelligentnavigation– insightandreporting– customization– accountmanagement– support

Page 4: conspiracy theory? or reality? 3/Talks/ROOTCON 3... · 2017. 3. 21. · reports of SMW2 and sunu13 are out FLAG and T GN seems to be not had any issues so far It seems at tffis point,

who

§ .phcensorshiplaw§ .uspatriotact§ .cn censorshiplaw

Page 5: conspiracy theory? or reality? 3/Talks/ROOTCON 3... · 2017. 3. 21. · reports of SMW2 and sunu13 are out FLAG and T GN seems to be not had any issues so far It seems at tffis point,

Page 6: conspiracy theory? or reality? 3/Talks/ROOTCON 3... · 2017. 3. 21. · reports of SMW2 and sunu13 are out FLAG and T GN seems to be not had any issues so far It seems at tffis point,

Page 7: conspiracy theory? or reality? 3/Talks/ROOTCON 3... · 2017. 3. 21. · reports of SMW2 and sunu13 are out FLAG and T GN seems to be not had any issues so far It seems at tffis point,

Page 8: conspiracy theory? or reality? 3/Talks/ROOTCON 3... · 2017. 3. 21. · reports of SMW2 and sunu13 are out FLAG and T GN seems to be not had any issues so far It seems at tffis point,

why

§ instantphishing§ instantmitm attack

Page 9: conspiracy theory? or reality? 3/Talks/ROOTCON 3... · 2017. 3. 21. · reports of SMW2 and sunu13 are out FLAG and T GN seems to be not had any issues so far It seems at tffis point,

when

§ chinaisdoingitnow

Page 10: conspiracy theory? or reality? 3/Talks/ROOTCON 3... · 2017. 3. 21. · reports of SMW2 and sunu13 are out FLAG and T GN seems to be not had any issues so far It seems at tffis point,

proof-of-concept

facebook.com

Page 11: conspiracy theory? or reality? 3/Talks/ROOTCON 3... · 2017. 3. 21. · reports of SMW2 and sunu13 are out FLAG and T GN seems to be not had any issues so far It seems at tffis point,

Page 12: conspiracy theory? or reality? 3/Talks/ROOTCON 3... · 2017. 3. 21. · reports of SMW2 and sunu13 are out FLAG and T GN seems to be not had any issues so far It seems at tffis point,

Page 13: conspiracy theory? or reality? 3/Talks/ROOTCON 3... · 2017. 3. 21. · reports of SMW2 and sunu13 are out FLAG and T GN seems to be not had any issues so far It seems at tffis point,

Page 14: conspiracy theory? or reality? 3/Talks/ROOTCON 3... · 2017. 3. 21. · reports of SMW2 and sunu13 are out FLAG and T GN seems to be not had any issues so far It seems at tffis point,

Page 15: conspiracy theory? or reality? 3/Talks/ROOTCON 3... · 2017. 3. 21. · reports of SMW2 and sunu13 are out FLAG and T GN seems to be not had any issues so far It seems at tffis point,

otherrelatedissues

Page 16: conspiracy theory? or reality? 3/Talks/ROOTCON 3... · 2017. 3. 21. · reports of SMW2 and sunu13 are out FLAG and T GN seems to be not had any issues so far It seems at tffis point,

Diving To ReconNG (Read-Only) - ROOTCON® Media Server 7/Talks/ROOTCON 7... · 2017-03-25 · lookups, enumerating hostnames, enumerating subdomains,enumeratingcompanyemails,etc

Cross Site Scripting - ROOTCON 12/Trainings/Bugcrowd...Web Application Hacker’s Handbook (2nd Edition) Chapter 12 - Attacking Users: Cross-Site Scripting OWASP Testing Guide 4.0

Introduction Google Hacking Techniques - media.rootcon.org 1/Talks/ROOTCON 2 - Google... · Google Hacking Techniques How to Protect your Websites •First step in attacking websites

Domain Discovery - ROOTCON 11/Trainings/RECON.pdf · A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform ★Kubebot: A security testing Slackbot

Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:

A presentation for rOOTcON 5 (September 9-11, 2011) By ... 5/Lock...A presentation for rOOTcON 5 (September 9-11, 2011) By:JollyMongrel (arf arf ) Very IMPORTANT DISCLAIMER: This presentation

bug hunting 101 - ROOTCON 11/Trainings...• Jay Turla a.k.a The Jetman • Application Security Engineer @Bugcrowd • Metasploit Contributor: Host Header Injection Detection, BisonWare

Fig. 16: Coal seems within the Karolinavölgy Sandstone ...tuprints.ulb.tu-darmstadt.de/1359/3/Ruckwied_Diss_Teil3.pdf · 21 Fig. 16: Coal seems within the Karolinavölgy Sandstone,

Burp Suite Introduction - ROOTCON 12/Trainings... · Burp Suite Introduction Bugcrowd University Jason Haddix - @jhaddix VP of Trust and Security @Bugcrowd Father, hacker, blogger,

alumniconcert.com...Soprano All car-ol - ing. Alto dong One seems One seems One seems One seems to to to to hear, hear, hear, hear, Words of Words of Words of Words of Rais Rais how

1 2 3 4 5 HALLELUJAH SORRY SEEMS TO BE 1 2 3 4 5 Léonard

Presented by: Morris D Fedeli ParklaneHotel, Cebu … 6/Talks/ROOTCON 6... · 2017. 3. 24. · Presented by: Morris D Fedeli ParklaneHotel, Cebu City, September 7 th 2012

It seems impossible!!!

It Seems Impossible, Holocaust

Unpackers in a World of Signature-less Malware Detection 7/Talks/ROOTCON 7... · 2017. 3. 25. · Protectors –Uses anti-debugging tricks to frustrate reversing. Packer Detection

Cloud Security Suite - ROOTCON 12/Talks/Defending cloud... · •Active Member of Null Bangalore Chapter •Researcher at heart. Why AWS/GCP/Azure Audit? •Misconfigured Access (IAM,

When Fear Seems Overwhelming

IT Conference 2011 Virtualization A New Risk. @tikbalangph rootCON 6 @parklane international hotel, cebu city [2012 sept 7-8]

Just Seems Right

ROOTCON 101

¡ IT SEEMS IMPOSSIBLE !

- ROOTCON 10/Trainings/ROOTCON 10...• Authentication is only as strong as your user management processes • Use the most appropriate form of authentication suitable for your asset

Network Security Monitoring: Beyond Intrusion Detection 8/Talks/ROOTCON 8 - Network Sec… · o Collection, analysis, and escalation of indications and warnings to detect and respond

Sometimes It Seems

Strengthening the Economic Evaluation of Multisectoral ...massp.ifpri.info › files › 2020 › 01 › SEEMS-Nutrition... · 3 Agenda Introduce new SEEMS-Nutrition project and support

AV is Dead! - ROOTCON 10/Talks/ROOTCON 10 - Is AV D… · winresume.exe Load kernel and other drivers MBR Master Boot Record Loads the VBR VBR Volume Boot Record Loads the Bootmgr

University Introduction to Bugcrowd - ROOTCON 12/Trainings/Bugcrowd...Introduction to BCU What makes a good submission Introduction to Burp Suite Reconnaissance and Discovery Insecure

REMOTE CODE EXECUTION - ROOTCON 10/Talks/ROOTCON... · RCE – binary deserialization • Java contains a native serialization mechanism, that converts objects to binary data •

Methodology v2 The Bug Hunters - ROOTCON 11/Trainings/The Bug Hunters... · ★XXE v2.5. light reading. Discovery ++ Discovery Intro to scraping for subdomains Enumall (recon-ng,

Seems Impossible

Demystifying a Malware Attack - ROOTCON 10/Talks/ROOTCON... · – Damballa – F-Secure – Trend Micro • @Tophs. Author of 2012 2015. Co-Author of 2016. Agenda • The Attack

ROOTCON 13 Pilot Study on Semi-Automated Patch … 13/Talks/Pilot Study on...BlackHatUSA 2019, AsiaCCS 2019, AIS3 2018/2016, PHDays IV, SECCON,etc 3 Agenda Background Extracting Security

RC11 Sponsorship Kit - ROOTCON 11/Docs/ROOTCON 11 Sponsors… · Universal Robina Corporation ... has a long history of digital threat and malware ... Major Sponsorship Add-ons Logo

Android Reversing - ROOTCON

Freakonomics: - Sewanhaka Central High School District ...€¦ · 3. Which part(s) of the chapter seems realistic and which seems far-fetched? Evaluate your assigned chapter in 1