A one-of-a-kind course on exploitation development! Covers techniques to defeat the latest protection mechanisms in the latest OSs.
Check it out...
Tuesday, June 9, 2009
Developing Exploits for Penetration Testers and Security Researchers
Bryce Galbraith, CISSP, GCIH, GSEC, CEH, CHFI, Security+, CCNA
Chief Hacking Officer
Layered Security
bryce{at}layeredsec.com
SANS Institute BIO
LinkedIn Profile
Chief Hacking Officer
Layered Security
bryce{at}
SANS Institute BIO
LinkedIn Profile
Contributing Author
Author of SANS SEC550
My Next 5 Public Courses
National Debt Clock
Toolz
- Aircrack-ng
- AlternateStreamView
- Anonymizer
- BackTrack
- BCWipe
- BeEF - Browser Explotation Framework
- BinText
- BotHunter
- Browser Rider
- BrowserSpy
- Burp Suite
- Cain & Abel
- Cheat Sheets
- Command-line Kung Fu
- DansGuardian
- DBAN - Darik's Boot and Nuke
- Deep Freeze
- DEFCON Toolz
- DNS Advisor Pro
- DomainTools
- DumpSec
- Edge Security Tools
- ElcomSoft
- Emerging Threats (Snort Sigs)
- Ettercap
- Exploit-Me
- Ferret and Hamster
- FireBug
- Firewall Builder
- FOCA Online (search metadata in files)
- Forensic Acquisition Utilities
- Free Rainbow Tables
- GFI LANGuard
- Google Sets
- Hacme Web Apps
- IP Blocks by Country
- IPv6 Tunnelbroker
- IronKey
- IRS
- Karmasploit
- Kon-Boot (password reset tool)
- L0phtCrack
- Layer Four Traceroute
- Live Sysinternals
- Macshift
- Maltego
- memoryze
- MetaSploit
- Metasploit Decloaking Engine
- MMC
- Nemesis
- Netdude
- Netifera
- NetMon
- netsh
- NetWitness Investigator
- Nikto
- NirSoft - freeware utils
- NMap
- Notepad++
- Offensive Security Exploit Archive
- Open Source Security Information Management
- OpenDNS
- OSSEC
- PacketLife.net Armory of Toolz
- Pass-the-Hash Toolkit
- pathping
- Pentest Labs: Web Application Edition
- Pipl
- PortableApps
- Proxy Strike
- PWDumpX
- py2exe
- Radmin
- RainbowCrack
- raWPacket
- Recuva - File Recovery
- RedCurtain
- reDuh
- Robotex
- RootKits (Unix)
- RootKits (Windows)
- saminside
- Samurai Web Testing Framework
- Scapy
- Screen command (Unix)
- Search Engine List
- Secunia PSI
- ServerSniff
- Sigcheck
- SiteDigger
- SNScan
- Sociel-Engineer's Toolkit (SET)
- Splunk
- SQL Cheat Sheets
- sqlmap
- SQLScan v1.0
- sslstrip
- STerm
- Sulley
- SuperScan v4.0
- SysInternals Tools
- System Explorer
- tcpreplay
- tcpxtract
- TextPad
- The Cassandra Tool
- ThrashLM
- Top 100 Network Security Tools
- TrapCall
- TrueCrypt
- Ubuntu Man Pages
- UNetbootin
- Universal Command Guide
- Unix Utils for Windows
- VMMap
- VMWare ThinApp
- VoIP Hopper
- Volatility Framework
- WarVOX
- Web Application Attack Framework (W3AF)
- Web Application Testing
- Web Historian
- Webtunnel
- WEPBuster
- WhoIsHostingThis.com
- Windows Power Shell
- Windows XP Commands
- winexe
- WirelessKeyView
- wlan2eth
- WMAP
- WMIC
- Wordlist Generator
- Wordlists (1)
- Wordlists (2)
- Wordlists (3)
- Wordlists (49 million words)
- Wordlists (US Citites)
- Yersinia
OSF Data Loss - Latest Incidents
Links
- A "Grey Hat" Guide
- Anti-Rookit
- Bitpipe.com
- Black Hat
- Browser Security Handbook
- Center for Internet Security
- Cybercrime.gov (US DoJ)
- Data Loss Database
- DEFCON
- DISA
- DoD Cyber Crime Center
- Hakin9 Magazine
- Integrity Global Security
- Market Share
- Milw0rm
- NewsNow (31000+ news sources)
- NIST Computer Security Division
- OSF Data Loss Database
- Packet Storm
- Process Library
- RFID (1)
- RFID (2)
- SANS - Consensus Audit Guidelines (CAG)
- SANS Computer Forensics
- SANS Institute
- SANS Internet Storm Center
- SANS Top 20
- SANS Top 25 Programming Errors
- Secunia
- Security Laboratory: Thought Leaders
- TaoSecurity
- User Account Control Explained
- VirusTotal
- VulnerabilityAssessment.co.uk
- White Wolf Security
- Wikileaks
Articles & How To's
- Backtrack 4 Tutorials
- Black Hat Archives
- Covert Channels
- DEFCON Archives
- Google Guide Quick Reference
- Hacking demo videos (John Strand)
- Injecting Meterpreter into Excel files
- Lock picking issues
- Metasploit Unleashed (free training)
- NTLMv2 - Demystified
- Pass-the-hash with Meterpreter
- Port-redirection how-to
- SecurityTube - security videos
- Simultaneous Sniffing of Multiple 802.11b Channels with Kismet
- Social-Engineer.org
- Wirelessdefence.org
Conferences
Useful Stuff
- 1-800-GOOG 411
- 10 add-ons for Firefox: Privacy and security
- Acronym Finder
- AV Test
- BetterPrivacy (deletes "super cookies")
- Bluecoat's K9 Web Protection (free)
- Browser Security Test
- Cellphone radiation info
- Data Execution Prevention
- Evernote
- FreeMind
- FreeNAS
- Gethuman Database
- Google Blog Search
- Google Book Search
- Google Reader
- How to save your keyboard after a spill
- IIS 7.0 Config Ref
- Inbox Zero Presentation
- KeePass Password Safe
- Kindle
- LIFE photo archive by Google
- Lifehacker
- Linux Directory Structure
- MindMapper
- National Do Not Call Registry
- No more lower back pain!
- OptOutPrescreen
- P90X Workout
- Packetlife.net packet captures
- Power plugs around the world
- Quotations Page
- SANS Buyers Guide
- SpaceMonger
- Stay Safe Online
- US Constitution
- US Debt Clock
- US Public Debt
- Use Bluetooth headsets to make VoIP calls on your computer
- Username Check
- Virus Bulletin
- Wireless Spectrum (PDF)
- Wireless Spectrum (PNG)
- Zimbra
- ZoomIt
Just for Fun
- "Series of Tubes"
- Bill Gates' mug shot
- Brian Regan (comedian)
- Bubble Wrap
- Certified Application Security Specialists
- Despair, Inc.
- DIY Demotivator
- Larry David - How to Handle Annoying Bluetooth Guys
- Let Me Google That For You (lmgtfy)
- Pandora
- PicLens
- R2D2 Projector
- Tech Supoort Cheat Sheet
- ThinkGeek
- White Hat Hacker Man
- Will it blend?
- ¡ʇı dılɟ
Blog Archive
-
►
2010
(39)
-
►
February
(20)
- “Anonymizer Universal” product suite launched
- Comcast launches first public U.S. trial of advanc...
- The Spy at Harriton High
- New Obama Executive Order allows INTERPOL to opera...
- School district accused of issuing webcam laptops ...
- Windows 7 AV bypass with -x in msfencode
- Broad New Hacking Attack Detected - 2,500 companie...
- The Great Australian Internet Blackout
- Core Integrates Its Penetration Testing Product Wi...
- 802.11n card that works with BackTrack 4 - woohoo!...
- Pentest Labs: Web Application Edition
- Great write up on the Social-Engineering Toolkit (...
- How To Use BitLocker With Attached VHD Drive Image...
- Government requires all devices to support IPv6
- CookieMonster nabs user creds from secure sites
- Google Taps NSA to Safeguard its Data
- Shmoocon Videos!
- Great job opening!
- Verizon MiFi Device Hacked
- FOSE Expo - March 23-25th in Washington, D.C.
-
►
January
(19)
- StaySafeOnline.org - great resource for family and...
- Nmap 5.20 Released
- Operation Aurora Overview
- IronKey responds to recent hack of numerous verndo...
- The Most Misunderstood Windows Security Setting of...
- Google Attack Part of Widespread Spying Effort
- Wonderful...
- My first blog post from 30,000 feet! Sweet.
- Hack of Google, Adobe Conducted Through Zero-Day I...
- Movement on the US Cyber Command
- BackTrack 4 Final Release
- One console to rule them all - Using Windows' "God...
- Crimeware-as-a-Service and antivirus evasion schem...
- Can you hear me now!?
- Top 10 Security Nightmares of the Decade
- SiteDigger v3.0 Released 12/01/2009
- Advanced application-level OS fingerprinting
- Hackers Brew Self-Destruct Code to Counter Police ...
- LOL - my business card is on CNN :)
-
►
February
(20)