Organizingninjas

512 views

Published on

http://tinyurl.com/kp3e58

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
512
On SlideShare
0
From Embeds
0
Number of Embeds
3
Actions
Shares
0
Downloads
6
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Organizingninjas

  1. 1. Organizing Ninjas There has to be a better talk name than this…
  2. 2. Where to start? • Welcome to b-sides. W00t. • Who are you? – Who am i? Ninja fact # 0x0302a : ninjas are mammals
  3. 3. Agenda • Background • Where we’re headed • Ptc (worst name evar) Ninja fact #0x0abad02a : Can run 100 miles on their hands
  4. 4. Where this all got started • Needed a methodology • Sorta kinda picked a methodology, but was still wicked disorganized • So. We built a Center of Excellence. Ninja fact #13213: ninjas are mammals
  5. 5. What’s a center of excellence? • Good question – think of it like a lamp. It stores excellence. – And knowledge • And methodology – And data » And lots of other fun stuffs. • Toolkit • Template projects • Persistent code / tools / whatever. Stuff. – Hackery. Not the skype channel, sorry. Ninja fact #13213: ninjas are mammels
  6. 6. Agenda • Background • Where we’re headed • Ptc (worst name evar) Ninja fact #0x0abad02a : Can run 100 miles on their hands
  7. 7. So why do I care • Good question again. – Faster (read: gsd) – More Consistent – More Scalable – More Fun – Free stuff • Even if you’re not a pentester Ninja fact #13213: ninjas are mammels
  8. 8. Wait did he say free • Why yes. – Free collaboration – Free updates (rss / on-screen notification) – Free traceability – Free reporting – Free scalability Ninja fact #13213: ninjas are mammels
  9. 9. Stuff we talk about a lot • Reconnaissance / Enumeration / Scanning • Exploitation • Yadda yadda yadda (though I really like post-exploitation) • Pirates • Exploitation So we’re not gonna talk about that stuff today. Ninja fact #13213: ninjas are mammels
  10. 10. Stuff we don’t talk about much • Collaboration (and how to do it effectively) • Methodology (and making it practical) • Reporting (and why it takes so damn long) • Project management • All “the other stuff” This is what we’re gonna discuss Ninja fact #13213: ninjas are mammels
  11. 11. Works well with others (Collaboration) • What I want to do: – work with dudes around the world • Guys who are better than me – communicate • Data from XYZ tool • Parsing tools • Documents – Go faster Ninja fact 0x0002a: Ninja can crush golfballs with 2 fingers, any two fingers.
  12. 12. Project management Booring Ninja fact #13213: ninjas are mammels
  13. 13. Methodology • Well, this could be cool, but really, generally boorrrring. Ninja fact #13213: ninjas are mammels
  14. 14. Reporting • BOOOOOOOOOOORRRRRRRRRRing. Ninja fact #13213: ninjas are mammels
  15. 15. Demo: kicking the tires • Components – Wiki / includes – Ticketing System • Tasks and Findings – SVN repo – Report Creation • Rapper Scripts • Template Projects Ninja fact #13213: ninjas are mammels
  16. 16. Future Work • Hub & Spoke System • More methodology -> tix (osstmm ,va.co.uk) • Customized tix & workflow • Better reportgen -> xml -> oowriter / msword • Auto-attack -> well-named locations in svn – Auto parsers through svn hooks • Correlation between tools – Object-based representation of the environ Ninja fact #13213: ninjas are mammels`

×