Bush1D0
Download as PPT, PDF0 likes241 views
The document introduces the speaker, Jayson E. Street, and discusses applying ancient military strategy from Sun Tzu's The Art of War to modern cybersecurity penetration testing. It outlines a 5-point methodology for recon, scanning, exploring, exploiting, and cleaning up. Several specific reconnaissance, scanning, and exploitation tools will be covered during the training, with the goal of teaching students to think strategically about locating vulnerabilities rather than just following scripts or powerpoints. The rest of the class will depend on how much effort students put in.
![Let go of my EGO Lets start out with a little about yours truly. [email_address]](https://image.slidesharecdn.com/bush1d0-090329180009-phpapp02/85/Bush1D0-2-320.jpg)
Bush1D0
- 1. Jayson E. Street, CISSP, GSEC, GCIH, GCFA, IEM, IAM, ETC… BUSH1D0 The Art of (CYBER) WAR
- 2. Let go of my EGO Lets start out with a little about yours truly. [email_address]
- 3. Know yourself know your enemy Sun Wu (Tzu) “Ping-fa”(The Art of War) “ Thus it is said that one who knows the enemy and knows himself will not be endangered in a hundred engagements. One who does not know the enemy but knows himself will sometimes be victorious, sometimes meet with defeat. One who knows neither the enemy nor himself will invariably be defeated in every engagement!”
- 4. Contents INTRO What we are doing here Stratagem Solutions 5 Point methodology The games begin
- 5. Training VS. Teaching Tools have a shelf life a methodology doesn’t I don’t plan on teaching you how to fish. I want to teach you how to figure out where the fish are. 3,000 year old military strategy successfully applied to modern day pen-testing. Hackers don’t audit a network why are you?
- 6. Stratagems we will cover 1.Cross the sea by fooling the sky 3. Kill with a borrowed knife 5. Loot a burning house 8. Pretend to take one path while sneaking down another 12. Take the opportunity to pilfer a goat 18. Defeat the enemy by capturing their chief 21. Slough off the cicada's golden shell 29. Deck the tree with false blossoms 30. Make the host and the guest exchange roles 36. If everything else fails, retreat
- 7. 5 Point Bush1d0 Methodology Recon Scanning Explore Exploit Expunge
- 8. Point #1 Recon Tools we will go over Sam Spade dnsenum metagoofil Maltego Google FEC News Sites
- 9. Point #2 Scanning Nmap Autoscan unicornscan
- 10. Point #3 Explore Nikto Httprint Grendel-scan
- 11. Point #4 Exploit Metasploit Milw0rm OSVDB
- 12. Point #5 Expunge Regedit Back Door Delete Button
- 13. Time to teach No more reading power points the rest of this class depends on how much you put into it.