Sploitego

995 views
817 views

Published on

Nadeem Douba, GWAPT, GPEN currently situated in the Ottawa (Ontario, Canada) valley, Nadeem provides technical security consulting services primarily to clients in the health, education, and public sectors. Nadeem has been involved within the security community for over ten years and has frequently presented talks in his local ISSA chapter, and most recently at DEF CON 20 on the topics of Open Source Intelligence and mobile security. He is also an active member of the open source software community and has contributed to projects such as libnet, Backtrack, and Maltego.

Published in: Education, Technology
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
995
On SlideShare
0
From Embeds
0
Number of Embeds
3
Actions
Shares
0
Downloads
22
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Sploitego

  1. 1. Presented by Nadeem Douba 1Monday, July 29, 2013@ndouba | ndouba@gmail.com
  2. 2.  Situated in Ottawa, ON, Canada  Work at Cygnos Information Security as Pen- Tester ◦ Subsidiary of Raymond Chabot Grant Thornton  Open Source Intelligence (OSInt)/Data Science Fanatic!  Open Source Software Fanatic: https://github.com/allfro  Credentials? ◦ Yes I sold my soul to the devil… 2Monday, July 29, 2013@ndouba | ndouba@gmail.com
  3. 3.  A Brief Intro to Maltego  What is Sploitego?  Why Sploitego?  Cool Demos  Installing Sploitego on Backtrack  Creating Your Own Transforms  Wrap Up  Questions Monday, July 29, 2013 3@ndouba | ndouba@gmail.com
  4. 4. For those who are not familiar… Monday, July 29, 2013 4@ndouba | ndouba@gmail.com
  5. 5. Sounds interesting… Monday, July 29, 2013 5@ndouba | ndouba@gmail.com
  6. 6. Monday, July 29, 2013 6@ndouba | ndouba@gmail.com
  7. 7.  Pen-test transforms for Maltego! ◦ Transforms for all stages  Built with Python and Canari Framework ◦ Rapid Development Local Transform Framework Monday, July 29, 2013 7@ndouba | ndouba@gmail.com
  8. 8. Hasn’t this been done before? Monday, July 29, 2013 8@ndouba | ndouba@gmail.com
  9. 9.  Open Source Intelligence (OSInt) gathering is a big part of our assessments.  Information we collect about our targets can break them.  Most OSINT tools work with Public information repositories.  What if you are working with something Private? Monday, July 29, 2013@ndouba | ndouba@gmail.com 9
  10. 10. Monday, July 29, 2013 10@ndouba | ndouba@gmail.com
  11. 11. Monday, July 29, 2013@ndouba | ndouba@gmail.com 11
  12. 12. Pros Cons  Full Client-side Control  Maintain Privacy  Great Data Visibility ✗ Processing Overhead ✗ Development ✗ IP Disclosure Monday, July 29, 2013 12@ndouba | ndouba@gmail.com
  13. 13. That can’t already be done with a remote transform? Monday, July 29, 2013@ndouba | ndouba@gmail.com 13
  14. 14. On Backtrack… Monday, July 29, 2013@ndouba | ndouba@gmail.com 14
  15. 15. Sploitego DNS Transforms Monday, July 29, 2013 15@ndouba | ndouba@gmail.com
  16. 16. Service Discovery Demo Monday, July 29, 2013 16@ndouba | ndouba@gmail.com
  17. 17. Vulnerability Discovery Demo Monday, July 29, 2013 17@ndouba | ndouba@gmail.com
  18. 18. With the Canari Framework! Monday, July 29, 2013 18@ndouba | ndouba@gmail.com
  19. 19.  Malformity by Keith Gilbert and team: ◦ https://github.com/digital4rensics/Malformity  NWMaltego, PaMalt, and CuckooForCanari by J. David Bressler and Rich Popson: ◦ https://github.com/bostonlink/nwmaltego_canari ◦ https://github.com/bostonlink/pamalt_canari ◦ https://github.com/bostonlink/cuckooforcanari  CookieGrabber by Adam Maxwell: ◦ https://github.com/catalyst256/canariCookieGrabber Monday, July 29, 2013@ndouba | ndouba@gmail.com 19
  20. 20.  Canari Websites: ◦ http://www.canariproject.com ◦ https://forums.canariproject.com  Limited Documentation: ◦ https://github.com/allfro/canari ◦ https://github.com/allfro/sploitego  Youtube Channel: ◦ http://youtube.com/allfro  Source Code/Bugging me Monday, July 29, 2013 20@ndouba | ndouba@gmail.com
  21. 21.  Email: ndouba@gmail.com  Twitter: @ndouba  Skype: nadeem.douba 21Monday, July 29, 2013@ndouba | ndouba@gmail.com
  22. 22.  Paterva: ◦ Andrew MacPherson (Mohawk) ◦ Roelof Temmingh (RT)  Cygnos/RCGTCI  The Security Community 22Monday, July 29, 2013@ndouba | ndouba@gmail.com
  23. 23. Questions in Q&A 23Monday, July 29, 2013@ndouba | ndouba@gmail.com

×