March 24 Meeting – Web Exploitation Kits Revealed

royf — Sun, 22 Mar 2009 21:40:51 +0000

In this meeting we will talk about crimeware kits.
We will discuss how these web exploitation (crimeware) kits are designed, review their features, and investigate how they are deployed and used.
A live demonstration will be given using MPack, so we will isolate the network again.

Be sure to attend, and bring an image of an unpatched XP installation if you want to see the exploitation in action yourself.

The presentation can be downloaded from here

Jan 20 Meeting – Bring Your Own Shell

royf — Wed, 14 Jan 2009 16:22:24 +0000

For the upcoming meeting we decided to do a nifty workshop on nmap and Metasploit!

The network will go HOT so we will operate in ‘pod mode’ to ensure no malicious data leaves the room. For this reason we need all of you to grab your favorite LiveCDs (I recomend you get BackTrack) so you can use the lab computers. I strongly recommend you do not use your laptops.

We will start with a quick presentation on Metasploit and how to build exploits using the framework. Later we will let you guys practice and play a bit on a few damn-vulnerable servers (windows and linux)

See you Tuesday the 20th (2009) !

Here is the presentation:
Metasploit Quicky

SEC-C » exploits

March 24 Meeting – Web Exploitation Kits Revealed

Jan 20 Meeting – Bring Your Own Shell