Hacker in the Wires

Presented at DEF CON 23 (2015), Aug. 6, 2015, 2 p.m. (60 minutes).

This talk will show attendees how to use a small ARM-based computer that is connected inline to a wired network for penetration testing. The computer is running a full-featured penetration testing Linux distro. Data may be exfiltrated using the network or via a ZigBee mesh network or GSM modem. The device discussed in this talk is easily integrated into a powerful penetration test that is performed with an army of ARM-based small computer systems connected by XBee or ZigBee mesh networking. Some familiarity with Linux and penetration testing would be helpful, but not required.

Presenters:

• Dr. Philip Polstra - Professor, Bloomsburg University   as Dr. Phil Polstra
  Phil was born at an early age. He cleaned out his savings at age 8 in order to buy a TI99-4A computer for the sum of $450. Two years later he learned 6502 assembly and has been hacking computers and electronics ever since. Dr. Phil currently works as a professor at Bloomsburg University of Pennsylvania. His research focus over the last few years has been on the use of microcontrollers and small embedded computers for forensics and pentesting. Phil has developed a custom pentesting Linux distro and related hardware to allow an inexpensive army of remote pentesting drones to be built using the BeagleBone Black computer boards. This work is described in detail in Phil's book "Hacking and Penetration Testing With Low Power Devices" (Syngress, 2015). Prior to entering academia, Phil held several high level positions at well-known US companies. He holds a couple of the usual certs one might expect for someone in his position. When not working, he likes to spend time with his family, fly, hack electronics, and has been known to build airplanes. Twitter: @ppolstra http://facebook.com/ppolstra

Links:

• https://defcon.org/html/defcon-23/dc-23-speakers.html#Polstra2
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 slides/DEF CON 23 - Dr Phil Polstra - Hacker in the Wires - Slides.mp4
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video/DEF CON 23 - Dr Phil Polstra - Hacker in the Wires - Video.mp4
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video and slides/DEF CON 23 - Dr Phil Polstra - Hacker in the Wires - Video and Slides.mp4 (Video and Slides)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 slides/DEF CON 23 - Dr Phil Polstra - Hacker in the Wires - Slides.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video and slides/DEF CON 23 - Dr Phil Polstra - Hacker in the Wires - Video and Slides.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video/DEF CON 23 - Dr Phil Polstra - Hacker in the Wires - Video.srt (subtitles)
• https://www.youtube.com/watch?v=b0IB6z9fry8

Similar Presentations:

• DEF CON 21 (2013) / We are Legion: Pentesting with an Army of Low-power Low-cost Devices
• THOTCON 0x4 (2013) / Mesh Stalkings
• DerbyCon 1.0 (2011) / Adaptive Penetration Testing