Explore a captivating DefCamp 2015 conference talk on ethical hacking and social engineering techniques. Dive into the world of information security as the speaker shares real-world experiences and strategies for penetration testing. Learn about reconnaissance methods, low-hanging fruit vulnerabilities, and the importance of thinking like an attacker. Discover how social engineering tactics can be used to gain unauthorized access to physical locations and digital systems. Gain insights into the challenges faced by security professionals and the need for better user awareness training. Examine case studies involving banks, office buildings, and charity organizations, highlighting the vulnerabilities in both technical and human elements of security. Understand the ethical implications of professional hacking and the crucial role it plays in improving overall security posture. Conclude with valuable lessons on creating teachable moments, the significance of engagement letters, and the principles of effective security awareness training.
Breaking in Bad - I'm the One Who Doesn't Knock - DefCamp - 2015
Overview
Syllabus
Intro
Legal Disclaimer
The Kittens
Theme
APT
Lowhanging fruit
Being bad is fun
Recon Mode
pwnage Mode
Passive Roles
I got in
Demo mode
Challenge Accepted
Not Scared
Desktop Support
Scanner
Teachable Moments
Bank Fail
Im a horrible person
Going to the next branch
Why do you wait
I go straight in
I stole the computer
The answer was pretty easy
I had none of that
You cant do that
Scope of work
Attack us
Why not
Spiders
The Office Building
Social Engineering
External Employees
My Nose
Walking to the Front
Google Street Car
Lobby
Recording
Pause
Bathroom
One Thing
Im Always Late
That Was A Lie
Off The Wall
Breaking In
Charity Organization
Lost
The Bathroom
The Elevator
Meeting the Board
Fake
Desktop Support Guy
USB Drive
Domain Admin
Mother Teresa of Jamaica
Fade Transition
On the Streets of Jamaica
Calling Clients
For the Record
Summary
What we have to teach humans
We need good hackers
Professional Evil
Stupid Users
Training Users
Create Teachable
WiFi Pineapple
Im a good guy
No one here
President of Legal Reform
Diet Pepsi
Im more than particular
So which is all good
I would not fit video
Do your companies have a number
Bank manager screaming
Give them opportunities
Visibility
Running Gunner
America
Pew Pew
Security
Questions
Engagement Letters
Security Guards
Security Awareness Training
Your Victory
The Principle
Training
Taught by
DefCamp
