ChalmersCTF with Michael Dubell

Subscribe to Hacker Talk and listen to the latest episodes at: https://anchor.fm/hacker-talk

In this episode of Security Headlines we deep dive into fuzzing with Patrick Ventuzelo. topics that we cover: being niched in cyber security patricks background, doing pentests on telecom networks, doing security research on the android kernel for the french DoD, reverse engineering, development Zero days in the android kernel choicing a target when fuzzing  blackbox and whitebox fuzzing fuzzing golang projects fuzzing rust projects setting up fuzzing enviroments webassembly security  fuzzing webassembly invalid web assembly opcodes the next generation of browser exploits javascript runtimes exploiting webassembly in the browser fuzzing blockchain applications how to write a fuzzer what to look for while fuzzing fuzzing javascript writing fuzzers in python ataris fuzzer for python code libfuzzer llvm analysing code repositories and finding bad patterns golang built in fuzzing(go-fuzz, fuzzing draft) fuzzing ethereum solidity smart contracts fuzz bench by google fuzzing the android kernel beacon fuzz reporting security bugs github security advisory favorite security conferences External links: https://fuzzinglabs.com/ http://stackoverflow.com/questions/43153964/ddg#43154559 https://www.youtube.com/channel/UCGD1Qt2jgnFRjrfAITGdNfQ telegram fuzzlab lab https://googleprojectzero.blogspot.com/2021/01/in-wild-series-chrome-exploits.html

In this episode of Security Headlines, we are joined by Jay Townsend who is  maintaining several infosec tools such as the harvester and discover. The harvester is a very popular tool for doing Osint analysis. Tune into this episode  as we deep dive into Osint, the opensource information gathering realms. In this episode we cover:   what is osint and how can we use it? discover, lee baird the harvester dnsrecon bash python backtrack wifi security, wep wifi pineapple, bash bunny, hack5 hack the box, try hack me, hack this site.org sysadmin, ansible finding passwords in log files how to apply security hardenings, systemctl hardenings  running weekly security scans bug bounties penetration tests finding old applications in production burpsuit using the harvester  harvester in kali linux, parrotsec, blackarch and debian porting the harvester to python 3 screen-shooting websites with the harvester hidden features in the harvester fierce dns hacking dnsrecon how to perform osint analysis on yourself and others how to protect yourself against osint attacks using throw away email addresses how to use osint during penetration tests python development docker linux firmware, wifi drivers visual code  the latest windows exploits Links: https://en.wikipedia.org/wiki/PyCharm https://www.parrotsec.org/ https://github.com/leebaird https://www.youtube.com/watch?v=F9UZdPokkhw https://github.com/laramies/theHarvester https://www.bleepingcomputer.com/news/microsoft/microsoft-shares-workaround-for-windows-10-serioussam-vulnerability/ https://en.wikipedia.org/wiki/Open-source_intelligence https://twitter.com/jay_townsend1 https://bloodhound.readthedocs.io/en/latest/  https://www.ansible.com/

In this episode of Security Headlines, Kolja Weber the creator of flokinet.is joins us.  In this episode we talk about: flokinet internet privacy german pirate party internet privacy laws Iceland starting an internet service provider running an internet service provider ipv4 addresses adoption of privacy friendly tools handling abuse requests  starting an internet service provider RIPE denial of service attacks mitigating denial of service attacks starting a privacy focused internet service provider DNS amplification attacks security free speech adoption of https, starttls and dkim external links: https://flokinet.is https://twitter.com/frelsisbaratta https://www.afrinic.net/ https://ripe.net https://en.wikipedia.org/wiki/RIPE_NCC https://en.wikipedia.org/wiki/AFRINIC https://letsencrypt.org/ https://www.qubes-os.org/

In this episode of Security Headlines, we are joined by Michael Dubell who co-founded Sweden's first student security   capture the flag team. What is capture the flag and how do you play it? How can you into hacking through the doors of playing   ctf's?  Michael started playing around with security as a teenager and the journey led him the capture the flag team, known   as "ChalmersCTF". Today, Michael is working with security during the day, and during the night he is developing the soon to    be released "bountrystrike"(which you can find on bountystrike.io) tool. Tune in as we talk about CTF, and a lot more! In this episode we cover:   halo one online wallhack war games hacking on forums hack this site over the wire https://www.hellboundhackers.org/ chalmers   chalmers CTF how to start a "capture the flag" team   organizing capture the flag meetups beginner ctfs over the wire   the capture the flag scene in Sweden   over the wire   whitebox pentesting    bug bounties automating scanning and automating bug bounties vulnerability management    finding bugs in bug bounty programs      ## External links:    https://github.com/search?q=capture%20the%20flag%20writeups&type=Everything&repo=&langOverride=&start_value=1    https://github.com/zardus/ctf-tools        https://ctftime.org      https://chalmersctf.se/      https://overthewire.org    https://twitter.com/StevenVanAcker     https://bountystrike.io/     https://dubell.io/   

In this episode of Security Headlines, we are joined by one of the minds behind the OpenBSD project, Antoine Jacoutot.  He is responsible   for porting over 300 packages into OpenBSD. He is also involved in syspatch which handles security binary upgrades for OpenBSD.   Tune in, as we talk about development, security, programming, OpenBSD and a lot more! ##  Topics that we cover:    OpenBSD's community opensource    rcctl   init systems   classic BSD background daemons in OpenBSD    OpenBSD desktops in the wild    companies running OpenBSD writing shellcode openup binary patches in OpenBSD How OpenBSD handle security issues how security binary patches are carried out.    syspatch  porting software to OpenBSD   Gnome on OpenBSD    OpenBSDs future with Amazon AWS sysmerge   submitting feature requests to OpenBSD   tmux  advice for first-time OpenBSD users      ## External links:    https://www.OpenBSD.org/errata.html  https://bsdfrog.org/    https://twitter.com/ajacoutot https://OpenBSD.org    https://gnome.org https://www.OpenBSD.org/faq/ports/ports.html    https://man.OpenBSD.org/syspatch https://man.OpenBSD.org/sysmerge     https://github.com/ajacoutot     https://man.OpenBSD.org/rcctl    

In this episode of Security Headlines, we are joined by a great mind in the   memory security space. A spark was created when Theofilos peaked    into the realms of security. So he packed his bag and got to the next plane to the US in order to deep-dive more into the security field during   his studies. He became fascinated by the world of writing exploits   and "smashing the stack" as we say in the hacking field.  He is a    brilliant guy when it comes to memory attack and he has co-written a    solution that solves the stack canary problem.    We had the chance to sit down with Theofilos Petsios and     get to hear his view on security, development and a lot more.   That you can tune into right here:   Stack canaries is a security mitigation technique that has been widely   adopted and you will find it in most systems today. But does it really work?   Topics that we touch upon in this episode:     Stack canaries    Address layer space randomization    Blind Return Oriented Programming (BROP)    Return Oriented Programming     Static code analysis     Rest in peace Andrea Bittau     security mitigations    Write Xor Execute(W^X)    Dynaguard    Where stack canaries fail and the operating systems approach to it.   hardening systems   where the future of security is going   CVE's over time    Memory corruption bugs    builtin security in the compilers     Security vs Overhead    Using memory in the Thread-local storage adoption of security mitigations    stack clash    Pin, Intel's dynamic binary instrumentation framework      Defense Advanced Research Projects Agency    whitepapers and Proof of concepts     Fuzzing     building better security tools     Cost vs benefit in the security field      Switching from userspace to kernel space mitigations    linters     secure codebases     formal verifications    "Stack canaries is just one little stone, one a the beach that keeps getting hit by big waves" External links https://twitter.com/theofilospe    https://www.cs.columbia.edu/~theofilos/files/slides/dynaguard.pdf https://www.cs.columbia.edu/~theofilos/files/papers/2015/dynaguard.pdf http://www.scs.stanford.edu/brop/    http://www.scs.stanford.edu/brop/bittau-brop.pdf    https://github.com/nettrino/DynaGuard     https://software.intel.com/content/www/us/en/develop/articles/pin-a-dynamic-binary-instrumentation-tool.html    https://github.com/nezha-dt/nezha     https://llvm.org/docs/LibFuzzer.html      https://github.com/nettrino/vimconf   https://capsule8.com/blog/millions-of-binaries-later-a-look-into-linux-hardening-in-the-wild/ https://youtu.be/Er44ur7wkXQ?t=44

Jonas Lejon is an amazing mind in the Swedish security world. A    great entrepreneur, hacker, and security-expert!    We had the pleasure of talking with him in this episode of Security Headlines. he wanted to specialize in security so he packed his bag and headed over   to the capital city to work more in-dept with security.  He wanted to    go deeper and deeper, so spent his extra hours learning the assembly programming  and getting into the low-level brain of the computer system.  He managed   to land a job working for the Swedish version of NSA.   Jonas now runs his own company called "Triop" and has a lot of fun side   projects that we dig into. In this episode we also cover:     Micro blogging   building search engines  bloggz dot se Getting over 20K users within a few weeks Twitter in the early days   Building Sweden's biggest micro-blogging platform testing in production    WordPress Security    bug bounties Finding security holes in Zoom writing about encryption and security fuzzing Hacking Bluetooth     ISOC-SE the swedish top level domains .se and .nu  the internet in Sweden      beatboxing  pentesting    enumerating existing users based on validation time  updated, security by default systems    network logging    Programming    leaving python 2 Customizing Kali linux   Time-of-check to time-of-use attacks  writing exploits  ## External links:    https://triop.se    https://kryptera.se     https://web.archive.org/web/20081102073248/http://bloggz.se/      https://web.archive.org/web/20110630210858/http://bloggy.se/    https://en.wikipedia.org/wiki/Memcached      https://wpsec.com/     https://utvbloggen.se/     https://se.linkedin.com/in/jonaslejon     https://www.youtube.com/channel/UCI49rLPi_Lbbux5eo8ewLKA      https://en.wikipedia.org/wiki/Dave_Aitel      https://github.com/SofianeHamlaoui/Spike-Fuzzer      https://isoc.se/      https://internetstiftelsen.se/en/      https://www.netnod.se/      https://en.wikipedia.org/wiki/Kali_Linux      https://en.wikipedia.org/wiki/Arcade_Fire      https://en.wikipedia.org/wiki/Time-of-check_to_time-of-use      https://github.com/juliocesarfort/public-pentesting-reports      https://www.hackerone.com/      https://www.bugcrowd.com/      https://twitter.com/jonasl     

In this episode of Security Headlines, we are joined by one of Gothenburg's security evangelist, Mr Johan Rydberg Moller. Johan is the cofounder of Gothenburg's own security conference *Security Fest*, sakerhetspodcasten - the first swedish security    podcast, hacker, explorer, and musician.  We get to hear the tale of how Johan got sucked into the world of hacking, that    has been his home for a lot of years now, as well as adventures with publicly disclosing security holes in some of    sweden's biggest websites.  This and a lot more in this episode of Security Headlines:    ## In this episode we cover:      learning web security when web security was a new thing Reporting security vulnerabilities.   life as a web developer.  finding security holes in the top 100 websites in Sweden.    PHP security cofounding assured starting the "security fest" conference    tattooing the conference logo starting the first Swedish security podcast pentesting gothenburg owasp web caching attacks ## External links           https://twitter.com/JohanRMoller    https://securityfest.com    https://sec-t.org    https://www.assured.se/      https://securitywithoutborders.org/blog.html       https://portswigger.net/burp      https://portswigger.net/research      https://www.youtube.com/watch?v=zP4b3pw94s0     https://www.theverge.com/2020/3/24/21192830/apple-safari-intelligent-tracking-privacy-full-third-party-cookie-blocking    https://soundcloud.com/johanrm    https://www.dagensmedia.se/medier/digitalt/soderhavet-kritiseras-for-sakerhetshal-6176181    https://sakerhetspodcasten.se/lyssna/    https://owasp.org/www-chapter-gothenburg/   

In this episode we are Joined by the developer, hacker and Code Siren founder Eijah. We walk down a road of 2 hours of honest conversation about Development, Morals,     working with McAfee, Hacking, Motivation, Mental Health, Security and a lot more!  Eija, an advocate for privacy and individual rights, quit a well paid job at rockstar games to start on a     journey pursuing what he loved. He went on a journey with the goal of creating technology that    enhance personal liberty and freedom.  The journey has had its bumps in the road but he as continued   marching forward, despite various problems.  Today, Eijah runs a software company called CodeSiren. Working on revolutionary technology In this episode we cover:   hacker spirit, engineer, tinkerer C++, Java Max payne 3, Red Dead Redemption, grand theft auto 5 programming for the love of it game developer, Working at rockstar, life at rockstar life as a developer hacking blueray and finding the blueray device keys Large code bases, code maintenance, clean modular code your code is your documentation Xbox360 vs Playstation 3 The failures of VPN companies, selling people's private companies.   Drinking pints, in Edinburgh Starting and developing demonsaw file sharing privacy traffic obfuscation and traffic subterfuge, bypassing deep packet inspection great firewall of china Surveillance Privacy Cryptography Censorship John Mcafee Being a senior programmer "My greatness stems from not having achieved what I am here to achieve" - Eijah ## External links:     https://twitter.com/demon_saw      https://codesiren.com      https://demonsaw.com      https://en.wikipedia.org/wiki/Commodore_VIC-20     https://darknetdiaries.com/episode/16/     https://en.wikipedia.org/wiki/Advanced_Encryption_Standard     https://en.wikipedia.org/wiki/CPU_time     https://forum.doom9.org/      https://www.reddit.com/domain/forum.doom9.org/         https://en.wikipedia.org/wiki/Hackers_(film)       https://en.wikipedia.org/wiki/Dunning-Kruger_effect        https://en.wikipedia.org/wiki/Impostor_syndrome      https://en.wikipedia.org/wiki/Allocator_(C%2B%2B)      https://en.wikipedia.org/wiki/PlayStation_technical_specifications     https://www.nextplatform.com/2019/01/24/unified-memory-the-final-piece-of-the-gpu-programming-puzzle/      https://www.youtube.com/watch?v=lTngMxmymX4      https://www.youtube.com/watch?v=fMfQQoHHLBA     https://steelpantherrocks.com/      https://www.youtube.com/watch?v=WjElZ-O9EpM