My talk will feature live demos of the ByteSweep platform but I'll pre-record them all in case of failure.
DEFCON 2019 SCHEDULE SOFTWARE
These version numbers are then compared against software version associated with CVEs by using the NVD JSON Data Feed. The situation we face this year is unique and will require us to do things differently, simplify our plans, and in a fast-moving environment be flexible to change. DEF CON will not be a normal con, but more like DEF CON Different. strcpy, sprintf, system, etc.) Version strings are extracted, using the strings regex search engine, from 3rd party components like open source programs and/or libraries. DEF CON 29 will be a hybrid conference, partially in-person, and partially online. Radare2's python r2pipe library is used to analyze extracted binaries for any unsafe function calls. He regularly works with prospects and customers and speaks at conferences worldwide including Black Hat, Defcon, Virus Bulletin, BotConf, ShmooCon, FloCon, Kaspersky SAS, Infosecurity Europe, RSA, Usenix Enigma, ACSC, NCSC, and Les Assises de la sécurité.
DEFCON 2019 SCHEDULE PASSWORD
In order to extract crypto keys and password hashes hard coded into firmware images, ByteSweep implements a custom strings regex search engine with configurable rules stored in a config file. ByteSweep utilizes the python libraries provides by binwalk to programatically extract filesystems from firmware images.
DEFCON 2019 SCHEDULE FREE
ByteSweep is a Free Software platform that automates a lot of the common steps I conduct manually when performing IoT pentests. The ICS Village DEFCON Call for Papers is open Deadline is June 30th - Submit here. This talk is the result of a 6 month long person project of mine to automatically, unpack and analyze IoT firmware for common security issues, with a nice web GUI to boot. The SkyTalks during DEF CON 27 take place over 3 days.
0 kommentar(er)
