Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.
dradis Framework


dradis Framework
sharing information will get you root
http://dradisframework.org/




                ...
dradis Framework


dradis Framework
sharing information will get you root
http://dradisframework.org/




                ...
Agenda
➔   In the begining, there was nothing
➔   The dradis project
➔   The Framework
➔   Demo
dradis Framework




In the begining, there was nothing




                                     4
In the begining, there was nothing

                         ✔ port scan
           Information   ✔ vuln. scan


         ...
In the begining, there was nothing

                          ✔ port scan
           Information    ✔ vuln. scan


       ...
In the begining, there was nothing

                          ✔ port scan
           Information    ✔ vuln. scan


       ...
In the begining, there was nothing


           Information
           Discovery


               What about
             ...
In the begigin, there was nothing




Why do we need THAT?




                                  9
why do we need it?




                 10
why do we need it?




                 11
why do we need it?




Scheduling Madness

                     12
Agenda
➔   In the begining, there was nothing
➔   The dradis project
dradis Framework

The dradis project

           ➔   Project goals
           ➔   Technology behind the scenes
           ...
The dradis project




Project goals




                                 15
The dradis project


4 goals for the project
        ➔   share information effectively




                               ...
The dradis project


4 goals for the project
        ➔   share information effectively
        ➔   easy to use and adopt

...
The dradis project


4 goals for the project
        ➔   share information effectively
        ➔   easy to use and adopt
 ...
The dradis project


4 goals for the project
        ➔   share information effectively
        ➔   easy to use and adopt
 ...
dradis Framework

The dradis project

           ➔   Project goals
           ➔   Technology behind the scenes




       ...
dradis Framework




Technology behind the scenes




                                 21
Technology behind the scenes




           REST

Database

           Web




                           22
dradis Framework

The dradis project

           ➔   Project goals
           ➔   Technology behind the scenes
           ...
The dradis project




Evolution

                  2007 - ...




                               24
The Framework

Activity




                       25
The Framework

Downloads




                        26
The dradis project




Why   DRADIS ?



                         <




                                  27
Agenda
➔   In the begining, there was nothing
➔   The dradis project
➔   The Framework
dradis Framework

The Framework

         ➔   Impossible is nothing
         ➔   dradis Plugins
         ➔   The Meta Serv...
The dradis project




Impossible is nothing




                                   30
Impossible is Nothing




DRADIS




                    31
Impossible is Nothing




DRADIS




                    32
Impossible is Nothing




           DRADIS



Vuln. DB



                               33
Impossible is Nothing




           DRADIS



Vuln. DB



                               34
dradis Framework

The Framework

         ➔   Impossible is nothing
         ➔   dradis Plugins




                      ...
The dradis project




dradis Plugins




                                  36
dradis Plugins

Convention over configuration


        module Plugins
         module Upload
          include NmapUpload...
dradis Plugins

Convention over configuration


        module Plugins
         module Upload
          include NmapUpload...
dradis Framework

The Framework

         ➔   Impossible is nothing
         ➔   dradis Plugins
         ➔   The Meta Serv...
The dradis project




  The Meta Server


“ The dradis Meta Server will be
  cooler than giant robots
  smashing into oth...
The Meta-Server




              41
The Meta-Server




              42
The Meta-Server




Archive




                        43
The Meta-Server




Archive       Backup




                        44
The Meta-Server




Archive            Backup




          Intelligence ( Stats? )

                                    45
Agenda
➔   In the begining, there was nothing
➔   The dradis project
➔   The Framework
➔   Demo
dradis Framework



Thanks.




                         47
dradis Framework


dradis Framework

http://dradisframework.org/


                        Daniel Martín Gómez
           ...
Upcoming SlideShare
Loading in …5
×

Defcon17 - dradis Framework: sharing information will get you root

3,573 views

Published on

Published in: Technology, Education
  • Be the first to comment

Defcon17 - dradis Framework: sharing information will get you root

  1. 1. dradis Framework dradis Framework sharing information will get you root http://dradisframework.org/ Daniel Martín Gómez etd@ngssoftware.com august 2009 1
  2. 2. dradis Framework dradis Framework sharing information will get you root http://dradisframework.org/ Daniel Martín Gómez etd@ngssoftware.com august 2009 2
  3. 3. Agenda ➔ In the begining, there was nothing ➔ The dradis project ➔ The Framework ➔ Demo
  4. 4. dradis Framework In the begining, there was nothing 4
  5. 5. In the begining, there was nothing ✔ port scan Information ✔ vuln. scan Discovery ✔ web app scan ✔ ... 5
  6. 6. In the begining, there was nothing ✔ port scan Information ✔ vuln. scan Discovery ✔ web app scan ✔ ... ✔ metasploit Exploiting ✔ milw0rm ✔ ... 6
  7. 7. In the begining, there was nothing ✔ port scan Information ✔ vuln. scan Discovery ✔ web app scan ✔ ... ✔ metasploit Exploiting ✔ milw0rm ✔ ... ✔ word Reporting ✔ pdf tools ✔ ... 7
  8. 8. In the begining, there was nothing Information Discovery What about sharing the Exploiting information? Reporting 8
  9. 9. In the begigin, there was nothing Why do we need THAT? 9
  10. 10. why do we need it? 10
  11. 11. why do we need it? 11
  12. 12. why do we need it? Scheduling Madness 12
  13. 13. Agenda ➔ In the begining, there was nothing ➔ The dradis project
  14. 14. dradis Framework The dradis project ➔ Project goals ➔ Technology behind the scenes ➔ Evolution ➔ Why dradis? 14
  15. 15. The dradis project Project goals 15
  16. 16. The dradis project 4 goals for the project ➔ share information effectively 16
  17. 17. The dradis project 4 goals for the project ➔ share information effectively ➔ easy to use and adopt 17
  18. 18. The dradis project 4 goals for the project ➔ share information effectively ➔ easy to use and adopt ➔ flexibility 18
  19. 19. The dradis project 4 goals for the project ➔ share information effectively ➔ easy to use and adopt ➔ flexibility ➔ small and portable 19
  20. 20. dradis Framework The dradis project ➔ Project goals ➔ Technology behind the scenes 20
  21. 21. dradis Framework Technology behind the scenes 21
  22. 22. Technology behind the scenes REST Database Web 22
  23. 23. dradis Framework The dradis project ➔ Project goals ➔ Technology behind the scenes ➔ Evolution 23
  24. 24. The dradis project Evolution 2007 - ... 24
  25. 25. The Framework Activity 25
  26. 26. The Framework Downloads 26
  27. 27. The dradis project Why DRADIS ? < 27
  28. 28. Agenda ➔ In the begining, there was nothing ➔ The dradis project ➔ The Framework
  29. 29. dradis Framework The Framework ➔ Impossible is nothing ➔ dradis Plugins ➔ The Meta Server 29
  30. 30. The dradis project Impossible is nothing 30
  31. 31. Impossible is Nothing DRADIS 31
  32. 32. Impossible is Nothing DRADIS 32
  33. 33. Impossible is Nothing DRADIS Vuln. DB 33
  34. 34. Impossible is Nothing DRADIS Vuln. DB 34
  35. 35. dradis Framework The Framework ➔ Impossible is nothing ➔ dradis Plugins 35
  36. 36. The dradis project dradis Plugins 36
  37. 37. dradis Plugins Convention over configuration module Plugins module Upload include NmapUpload end end 37
  38. 38. dradis Plugins Convention over configuration module Plugins module Upload include NmapUpload end end ./script/generate upload_plugin nessus 38
  39. 39. dradis Framework The Framework ➔ Impossible is nothing ➔ dradis Plugins ➔ The Meta Server 39
  40. 40. The dradis project The Meta Server “ The dradis Meta Server will be cooler than giant robots smashing into other giant robots!” dradis-devel mailing list : 2009-06-29 40
  41. 41. The Meta-Server 41
  42. 42. The Meta-Server 42
  43. 43. The Meta-Server Archive 43
  44. 44. The Meta-Server Archive Backup 44
  45. 45. The Meta-Server Archive Backup Intelligence ( Stats? ) 45
  46. 46. Agenda ➔ In the begining, there was nothing ➔ The dradis project ➔ The Framework ➔ Demo
  47. 47. dradis Framework Thanks. 47
  48. 48. dradis Framework dradis Framework http://dradisframework.org/ Daniel Martín Gómez etd@ngssoftware.com #dradis irc.freenode.org 48

×