Defcon17 - dradis Framework: sharing information will get you root

dradis Framework dradis Framework sharing information will get you root http://dradisframework.org/ Daniel Martín Gómez etd@ngssoftware.com august 2009 1

dradis Framework dradis Framework sharing information will get you root http://dradisframework.org/ Daniel Martín Gómez etd@ngssoftware.com august 2009 2

Agenda ➔ In the begining, there was nothing ➔ The dradis project ➔ The Framework ➔ Demo

dradis Framework In the begining, there was nothing 4

In the begining, there was nothing ✔ port scan Information ✔ vuln. scan Discovery ✔ web app scan ✔ ... 5

In the begining, there was nothing ✔ port scan Information ✔ vuln. scan Discovery ✔ web app scan ✔ ... ✔ metasploit Exploiting ✔ milw0rm ✔ ... 6

In the begining, there was nothing ✔ port scan Information ✔ vuln. scan Discovery ✔ web app scan ✔ ... ✔ metasploit Exploiting ✔ milw0rm ✔ ... ✔ word Reporting ✔ pdf tools ✔ ... 7

In the begining, there was nothing Information Discovery What about sharing the Exploiting information? Reporting 8

In the begigin, there was nothing Why do we need THAT? 9

why do we need it? 10

why do we need it? 11

why do we need it? Scheduling Madness 12

Agenda ➔ In the begining, there was nothing ➔ The dradis project

dradis Framework The dradis project ➔ Project goals ➔ Technology behind the scenes ➔ Evolution ➔ Why dradis? 14

The dradis project Project goals 15

The dradis project 4 goals for the project ➔ share information effectively 16

The dradis project 4 goals for the project ➔ share information effectively ➔ easy to use and adopt 17

The dradis project 4 goals for the project ➔ share information effectively ➔ easy to use and adopt ➔ flexibility 18

The dradis project 4 goals for the project ➔ share information effectively ➔ easy to use and adopt ➔ flexibility ➔ small and portable 19

dradis Framework The dradis project ➔ Project goals ➔ Technology behind the scenes 20

dradis Framework Technology behind the scenes 21

Technology behind the scenes REST Database Web 22

dradis Framework The dradis project ➔ Project goals ➔ Technology behind the scenes ➔ Evolution 23

The dradis project Evolution 2007 - ... 24

The Framework Activity 25

The Framework Downloads 26

The dradis project Why DRADIS ? < 27

Agenda ➔ In the begining, there was nothing ➔ The dradis project ➔ The Framework

dradis Framework The Framework ➔ Impossible is nothing ➔ dradis Plugins ➔ The Meta Server 29

The dradis project Impossible is nothing 30

Impossible is Nothing DRADIS 31

Impossible is Nothing DRADIS 32

Impossible is Nothing DRADIS Vuln. DB 33

Impossible is Nothing DRADIS Vuln. DB 34

dradis Framework The Framework ➔ Impossible is nothing ➔ dradis Plugins 35

The dradis project dradis Plugins 36

dradis Plugins Convention over configuration module Plugins module Upload include NmapUpload end end 37

dradis Plugins Convention over configuration module Plugins module Upload include NmapUpload end end ./script/generate upload_plugin nessus 38

dradis Framework The Framework ➔ Impossible is nothing ➔ dradis Plugins ➔ The Meta Server 39

The dradis project The Meta Server “ The dradis Meta Server will be cooler than giant robots smashing into other giant robots!” dradis-devel mailing list : 2009-06-29 40

The Meta-Server 41

The Meta-Server 42

The Meta-Server Archive 43

The Meta-Server Archive Backup 44

The Meta-Server Archive Backup Intelligence ( Stats? ) 45

Agenda ➔ In the begining, there was nothing ➔ The dradis project ➔ The Framework ➔ Demo

dradis Framework Thanks. 47

dradis Framework dradis Framework http://dradisframework.org/ Daniel Martín Gómez etd@ngssoftware.com #dradis irc.freenode.org 48

http://dradisframework.org	782
http://www.securitytube.net	324
http://securitytube.net	56
http://www.slideshare.net	9
http://blog.dradisframework.org	6
http://translate.googleusercontent.com	3
http://webcache.googleusercontent.com	2

Defcon17 - dradis Framework: sharing information will get you root

by etd on Aug 06, 2009

Accessibility

Categories

Upload Details

Usage Rights

7 Embeds 1,182

Statistics

Defcon17 - dradis Framework: sharing information will get you root — Presentation Transcript