![Page 1: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/1.jpg)
1
dradis Framework
dradis Framework sharing information will get you root
http://dradisframework.org/
Daniel Martín Gó[email protected] 2009
![Page 2: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/2.jpg)
2
dradis Framework
dradis Framework sharing information will get you root
Daniel Martín Gó[email protected] 2009
http://dradisframework.org/
![Page 3: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/3.jpg)
Agenda
➔ In the begining, there was nothing
➔ The dradis project
➔ The Framework
➔ Demo
![Page 4: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/4.jpg)
4
dradis Framework
In the begining, there was nothing
![Page 5: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/5.jpg)
5
In the begining, there was nothing
Information Discovery
✔ port scan✔ vuln. scan✔ web app scan✔ ...
![Page 6: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/6.jpg)
6
In the begining, there was nothing
Information Discovery
✔ port scan✔ vuln. scan✔ web app scan✔ ...
Exploiting✔ metasploit✔ milw0rm✔ ...
![Page 7: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/7.jpg)
7
In the begining, there was nothing
Information Discovery
✔ port scan✔ vuln. scan✔ web app scan✔ ...
Exploiting✔ metasploit✔ milw0rm✔ ...
✔ word✔ pdf tools✔ ...
Reporting
![Page 8: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/8.jpg)
8
In the begining, there was nothing
Information Discovery
Exploiting
Reporting
What aboutsharing the
information?
![Page 9: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/9.jpg)
9
In the begigin, there was nothing
Why do we need THAT?
![Page 10: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/10.jpg)
10
why do we need it?
![Page 11: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/11.jpg)
11
why do we need it?
![Page 12: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/12.jpg)
12
why do we need it?
Scheduling Madness
![Page 13: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/13.jpg)
Agenda
➔ In the begining, there was nothing
➔ The dradis project
![Page 14: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/14.jpg)
14
dradis Framework
The dradis project
➔ Project goals
➔ Technology behind the scenes
➔ Evolution
➔ Why dradis?
![Page 15: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/15.jpg)
15
The dradis project
Project goals
![Page 16: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/16.jpg)
16
The dradis project
4 goals for the project
➔ share information effectively
![Page 17: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/17.jpg)
17
The dradis project
4 goals for the project
➔ share information effectively
➔ easy to use and adopt
![Page 18: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/18.jpg)
18
The dradis project
4 goals for the project
➔ share information effectively
➔ easy to use and adopt
➔ flexibility
![Page 19: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/19.jpg)
19
The dradis project
4 goals for the project
➔ share information effectively
➔ easy to use and adopt
➔ flexibility
➔ small and portable
![Page 20: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/20.jpg)
20
dradis Framework
The dradis project
➔ Project goals
➔ Technology behind the scenes
![Page 21: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/21.jpg)
21
dradis Framework
Technology behind the scenes
![Page 22: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/22.jpg)
22
Technology behind the scenes
Database
REST
Web
![Page 23: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/23.jpg)
23
dradis Framework
The dradis project
➔ Project goals
➔ Technology behind the scenes
➔ Evolution
![Page 24: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/24.jpg)
24
The dradis project
Evolution
2007 - ...
![Page 25: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/25.jpg)
25
The Framework
Activity
![Page 26: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/26.jpg)
26
The Framework
Downloads
![Page 27: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/27.jpg)
27
The dradis project
Why DRADIS?
<
![Page 28: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/28.jpg)
Agenda
➔ In the begining, there was nothing
➔ The dradis project
➔ The Framework
![Page 29: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/29.jpg)
29
dradis Framework
The Framework
➔ Impossible is nothing
➔ dradis Plugins
➔ The Meta Server
![Page 30: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/30.jpg)
30
The dradis project
Impossible is nothing
![Page 31: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/31.jpg)
31
Impossible is Nothing
DRADIS
![Page 32: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/32.jpg)
32
Impossible is Nothing
DRADIS
![Page 33: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/33.jpg)
33
Impossible is Nothing
DRADIS
Vuln. DB
![Page 34: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/34.jpg)
34
Impossible is Nothing
DRADIS
Vuln. DB
![Page 35: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/35.jpg)
35
dradis Framework
The Framework
➔ Impossible is nothing
➔ dradis Plugins
![Page 36: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/36.jpg)
36
The dradis project
dradis Plugins
![Page 37: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/37.jpg)
37
dradis Plugins
module Plugins module Upload include NmapUpload endend
Convention over configuration
![Page 38: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/38.jpg)
38
dradis Plugins
module Plugins module Upload include NmapUpload endend
Convention over configuration
./script/generate upload_plugin nessus
![Page 39: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/39.jpg)
39
dradis Framework
The Framework
➔ Impossible is nothing
➔ dradis Plugins
➔ The Meta Server
![Page 40: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/40.jpg)
40
The dradis project
The Meta Server
The dradis Meta Server will be cooler than giant robots smashing into other giant robots!
“
”dradis-develmailing list : 2009-06-29
![Page 41: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/41.jpg)
41
The Meta-Server
![Page 42: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/42.jpg)
42
The Meta-Server
![Page 43: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/43.jpg)
43
The Meta-Server
Archive
![Page 44: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/44.jpg)
44
The Meta-Server
Archive Backup
![Page 45: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/45.jpg)
45
The Meta-Server
Archive
Intelligence ( Stats? )
Backup
![Page 46: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/46.jpg)
Agenda
➔ In the begining, there was nothing
➔ The dradis project
➔ The Framework
➔ Demo
![Page 47: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/47.jpg)
47
dradis Framework
Thanks.
![Page 48: Defcon17 - dradis Framework: sharing information will get you root](https://reader034.vdocument.in/reader034/viewer/2022042813/5458b788b1af9f40378b524e/html5/thumbnails/48.jpg)
48
dradis Framework
dradis Framework
Daniel Martín Gó[email protected]
http://dradisframework.org/
irc.freenode.org
#dradis