BH Mobile Security Summit
June 16-18, 2015
ExCeL London | London, UK
Black Hat USA
August 1-6, 2015
Mandalay Bay | Las Vegas, NV
Black Hat Europe
November 10-13, 2015
Amsterdam RAI | The Netherlands
5/20/2014
01:00 PM
Black Hat Staff
Black Hat Staff
Event Updates
50%
50%

Black Hat USA 2014: Something in the Air

Today's quartet of Black Hat 2014 Training highlights delve into the wide world of wireless hacking.

We start off from a defensive posture with Foundstone's Ultimate Hacking: Wireless. Sure, your org's got an authorized wireless infrastructure, but what about the wireless networks that aren't supposed to be there? The "temporary" access point that's still there months later? That AP brought in by a passing contractor? All are possible attack points. This Training aims to help you see WiFi networks like hackers do, which will give you the knowledge you need to defend against WiFi hackers' increasingly sophisticated tools, techniques, and methods. 

A case in point might be someone with the knowledge offered in our next highlighted Training, Hacking by Numbers Reloaded: Wireless Bootcamp. Starting from the basics, you'll learn the standard techniques Sensepost's analysts use in their wireless engagements, eventually working your way up to bleeding-edge research. Expect theory, practical exercises, and a lot of hands-on WiFi hacking. WPA won't know what hit it. 

Looking beyond WiFi, software-defined radio is an idea whose time has finally come. The aptly named Training Software Defined Radio will bring you up to speed on this brave new world of freeform radio with the help of a shiny new HackRF One SDR radio transceiver, yours to keep. Or for another approach to the topic check out Radio Exploitation, which will show you how to intercept, demodulate, decode, and reverse engineer RF signals, as well as exploit vulnerabilities in RF systems. WiFi too passé? Check out these waveforms! 

Ready to register? Early-bird rates are available until June 2. Please visit Black Hat USA 2014's registration page to get started. 

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-0543
Published: 2015-07-05
EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVE-2015-0544
Published: 2015-07-05
EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly generate random values for session cookies, which makes it easier for remote attackers to hijack sessions by predicting a value.

CVE-2015-4129
Published: 2015-07-05
SQL injection vulnerability in Subrion CMS before 3.3.3 allows remote authenticated users to execute arbitrary SQL commands via modified serialized data in a salt cookie.

CVE-2015-0547
Published: 2015-07-04
The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors.

CVE-2015-0548
Published: 2015-07-04
The D2DownloadService.getDownloadUrls service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors.

Dark Reading Radio
Archived Dark Reading Radio
Marc Spitler, co-author of the Verizon DBIR will share some of the lesser-known but most intriguing tidbits from the massive report