SecuraBit Episode 45 – More on DOJOCON

Marcus J Carey discusses MetaSponse tool to be released in

Metasploit Framework 3.3  Released!

Join us in IRC at irc.freenode.net #securabit

Hosts:

Guest:

Links:

DojoCon - http://www.dojocon.org/

NoVA Hackers - http://groups.google.com/group/novahackers

dojosec @ USTREAM http://www.ustream.tv/dojosec

SecuraBit Episode 43 – The Academy Pro

Guest Interview: Peter Giannoulis of The Academy Pro

Metasploit Rising

http://blog.metasploit.com/2009/10/metasploit-rising.html

WordPress 2.8.5: Hardening Release

Blubrry PowerPress Podcasting Plugin for WordPress

Time Warner Cable Exposes 65,000 Customer Routers to Remote Hacks http://www.wired.com/threatlevel/2009/10/time-warner-cable/

Google Voice voicemails appearing in public search results

TweetDeck

Porn, CSS History Hacking, User Recon and Blackmail

Windows 7

Magic Mouse

Quick Shell Script to Extract Contents

Join us in IRC at irc.freenode.net #securabit

Hosts:

Guest:

Links:

Don't forget to listen to the end of the show for the guest appearances by both Kermit the Frog and Sean Connery

Part 2: Scott Moulton

• Who are you, and what are you doing on THIS podcast?

• Tell us about the PaulDotCom podcast (I’ve talked to SecuraBit listeners who have never heard of PDC)

• How long have you been using Nessus?

• When did you start working for Tenable?

• What is your role at Tenable?

• What’s new in this version of Nessus?

• Are changes driven primarily by Tenable, or the community?

• What does Nessus use for a scanning engine?

• How does Nessus interact and work with Nmap?

• Explain Nessus licensing and what an individual vs a corp is entitled to.

• How much is a license?

• Cost of proffesional feed = $1200.00/year

• Home feed no longer a delay, no SCADA plugins

• How does Nessus differ from OpenVAS?

• Can you use the OpenVAS repo with Nessus?

• Talk about the extensibility of Nessus. (Scripting, etc)

• How does Nessus work with OVAL definitions? How does this help for FDCC compliance?

• Does tenable have any dedicated appliances for enterprise scanning and monitoring based on nessus?

• Do you place scanning servers on each segment of the network, or do you scan through zone-to-zone firewalls? Why?

• Is there a practical limit to the number of deices that can be scanned by one scanning server? Or is it just a time tradeoff?

• How often do you scan (and re-scan) a network?

• How do you handle the results (and avoid dropping a 300 page Nessus report on the server guys and saying FIX IT)

• Are results parse-able and able to be fed into compliance and risk management tools?

• When is the next PaulDotCom episode?

• What are the topics/guests?

• What is your favorite beer?

SecuraBit Episode 39 – Stealing candy from little kids everywhere!!!

Jay brought up that some government web sites will be switching to an http://openid.org authentication

What Does DHS Know About You? - http://philosecurity.org/2009/09/07/what-does-dhs-know-about-you

TwiGUARD - http://twiguard.com/index.html

MS IIS FTPD DoS ZER0DAY - http://www.milw0rm.com/exploits/9587

Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D. - http://www.milw0rm.com/exploits/9594

Poison Ivy Remote Administration Tool - http://www.poisonivy-rat.com/

FRHACK: Pentesting Live DVD - http://pentestit.com/2009/09/09/frhack-pentesting-livedvd/

Upcoming Events:

Phreaknic 13 - http://www.phreaknic.info/pn13/Site_2/Welcome.html

SANS Cyber Defense Initiative - http://www.sans.org/cyber-defense-initiative-2009

ToorCon - http://www.toorcon.org/

Join us in IRC at irc.freenode.net #securabit

Hosts:

SecuraBit Episode 38 – Classic Securabit, Lots of Rambling, Low Content

Louisville Metro InfoSec Conference in Louisville, KY

• John Strand
• Lee Kushner
• Scott Moulton
• Adrian "IronGeek" Crenshaw

http://www.louisvilleinfosec.com/

If you wish to attend the conference you can use the discount code of "geek seat" to get $20 off registration

Round Table Topic: Who should be responsible for patching? Infrastructure or Security?

There is a conversation about the new Snow Leopard for Mac and Macs mail.

A brief discussion about Helix, Security Onion, and Splunk 4.

Join us in IRC at irc.freenode.net #securabit

Hosts:

Guest:

Links:

SecuraBit Episode 37 – Mapping Networks with Fyodor and NMAP

After our interview we cover DEFCON and the Podcasters meetup.

Join us in IRC at irc.freenode.net #securabit

Hosts:

Guest:

Links:

SecuraBit Episode 36 - The f0rb1dd3n Network

We are joined by Jayson Street to talk about his book, Disecting the Hack: The f0rb1dd3n

Network, that is due out soon. All Black Hat bags will have an excerpt from the book in them.

Additionally we get Jayson's input on the topic of the recent denial of service attacks not

coming from North Korea after all.

DJ Great Scott gives us an update on the social events at this years DEFCON.

Finally we cover media destruction policies. How do you decommission old hard disks? Do you

retain the ones from your copiers and fax machines? What about thumb drives?

Join us in IRC at irc.freenode.net #securabit

Hosts:

Anthony Gartner – http://www.anthonygartner.com – @anthonygartner

Guest:

Links:

http://blogs.usatoday.com/technologylive/2009/07/evidence-has-surfaced-that-the-denial-of-service-attacks-that-crippled-dozens-of-us-and-south-korean-web-sites-last-week-ma.html

http://www.pcworld.idg.com.au/article/311070/uk_north_korea_source_ddos_attacks_researcher_says