security wtfs - sdd conference...rfb eø3.ee7 authentication disabled timothy hovde about intro...

98
Security WTFs

Upload: others

Post on 01-May-2021

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple

Security WTFs

Page 2: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple

Niall Merrigan

• Managing Consultant Capgemini Stavanger• Microsoft Most Valuable Professional

(MVP) ASP.NET/IIS• ASPInsider• Microsoft Azure Advisor• Likes whiskey if you are buying

@[email protected]

www.certsandprogs.com

Page 3: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple

Security is hard

Page 4: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple

One Mistake

Page 5: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 6: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 7: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 8: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 9: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 10: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 11: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 12: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 13: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 14: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 15: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 16: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 17: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 18: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 19: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 20: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 21: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 22: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 23: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 24: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 25: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 26: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 27: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 28: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 29: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 30: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 31: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 32: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 33: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 34: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 35: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 36: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 37: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 38: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 39: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 40: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 41: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 42: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 43: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 44: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 45: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 46: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 47: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 48: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 49: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 50: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 51: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 52: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 53: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 54: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 55: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 56: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 57: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 58: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 59: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 60: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 61: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 62: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 63: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 64: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 65: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 66: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 67: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 68: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 69: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 70: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 71: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 72: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 73: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 74: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 75: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 76: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 77: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 78: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 79: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 80: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 81: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 82: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 83: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 84: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 85: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 86: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 87: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 88: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 89: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 90: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 91: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 92: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 93: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 94: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 95: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 96: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple
Page 97: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple

Reources

• Shodan – https://www.shodan.io/?language=en

• Google - http://lmgtfy.com/?q=google

• Google Hacking Database - https://www.exploit-db.com/google-hacking-database/

• SearchDiggity - https://www.bishopfox.com/resources/tools/google-hacking-diggity/attack-tools/

• GitRob - https://github.com/michenriksen/gitrob

Page 98: Security WTFs - SDD Conference...RFB eø3.ee7 authentication disabled Timothy Hovde About Intro I-REEDUM FREE Updated softwue is available for this . Web Web Java 7 Services 5901 http-simple

Niall Merrigan

• Managing Consultant Capgemini Stavanger• Microsoft Most Valuable Professional

(MVP) ASP.NET/IIS• ASPInsider• Microsoft Azure Advisor• Likes whiskey if you are buying

@[email protected]

www.certsandprogs.com