Top
Search n00bz.net
  • South Florida Security Resources
    • HackMiami.org
      HackMiami is made up of information security professionals, hardware engineers, network administrators, students, and those who simply enjoy technology.
    • South Florida ISSA
      The Information Systems Security Association is, "the pre-eminent trusted global information security community".
  • PenTest Solutions
    • Rapid7 Metasploit Express
      Metasploit Express is an affordable, easy-to-use penetration testing solution that provides full network penetration testing capabilities, backed by the world’s largest, fully tested and integrated public database of exploits.
    • Core Impact PRO
      Core Impact is designed to evaluate the whole of the security in an office ecosystem. It allows the user to probe for and exploit security vulnerabilities in computer networks, endpoints and web applications.

 Select an option from the HackMiami Pwn-Off drop down menu above

Also, please visit the AntiVirus CVE option from the menu above or click here


The network main switch was a CISCO 881W.  We had a box running SLAX to capture the traffic for analysis after the event.  The resulting traffic generated a PCAP file that requires over 4 gb of RAM to open with Wire Shark.  (Denial of Service Exploit)

 

 

For our VM Targets, we used 2 hosts, the Beast and Satan.

The Beast is a machine born for gaming but with 24 gigs of RAM was able to host several hosts/targets.

Satan was a home built machine representing Windows, OSX and several versions of the penguin. 

 

The Beast

 

 Satan

 

The VM's that we had one the network are as follow:

 

Our attacking computers had both CANVAS and Metasploit Express running on Unbuntu 10.04. Core Impact PRO was running on Windows XP SP3.  We used Firefox to load the Metasploit Express Web Console.

 

 

 

A big special thanks to all the people who put in such hard work to make this a successful event. The faces have been blanked out to protect the guilty.  Just because you're paranoid, doesn't mean they're not after you.