Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Black Hat Asia
May 10-13, 2022
Hybrid/Marina Bay Sands, Singapore
Black Hat USA
August 6-11, 2022
Las Vegas, NV, USA
Black Hat Europe
December 5-8, 2022
London
3/5/2015
11:00 AM
Black Hat Staff
Black Hat Staff
Event Updates

Black Hat USA 2015: Newbie's First Pentest

Penetration testing programming is an intrinsic part of any Black Hat event, but we might outdo ourselves at Black Hat USA 2015. Our pentest programming runneth so much over that it'll take several intel updates just to touch on it all. This is the first, with a focus on more beginner-oriented offerings.

We start with a known classic from SensePost (celebrating 15 years with Black Hat, by the way!), which you may remember under its previous moniker, Hacking by Numbers. Their newly updated 0x7df Basic Tools & Techniques for Hackers - Beginner Level is an introductory course designed for folks who have little hands-on hacking or security experience, but who want to get their feet wet and hands dirty. It aims to provide an ideal training ground for further hacking courses, and no doubt it will.

If you're looking to get some hands-on experience with the tools and techniques bad guys use, Abilities Inc - Metasploit Beginners Course might just be the ticket. Rob "mubix" Fuller and James "egypt" Lee will reshape fresh newbs from zeroes into heroes, using Metasploit to familiarize them with everything from getting the framework running to gaining persistence and owning a whole network. Two days of this and most folks'll be ready to take the Metasploit Mastery course, they reckon.

Finally, close the laptops and set down the tablets to consider an oft-overlooked component of data and system security: physical security. The most hardened servers and network won't make the slightest difference if someone can get to a keyboard or, worse yet, take the hardware for a walk. The CORE Group's Physical Penetration Testing will teach how to best protect buildings and grounds from unauthorized access, as well as how to compromise most existing physical security in order to gain illicit access. Look, you know a Training's gonna be fun when it asserts "No prior knowledge of lockpicking is necessary."

As ever, Black Hat USA 2015 will occur at the lovely Mandalay Bay resort in Las Vegas. It goes down August 1-6, so there's plenty of time to lock in those sweet early-bird discounts.

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Improving Enterprise Cybersecurity With XDR
Enterprises are looking at eXtended Detection and Response technologies to improve their abilities to detect, and respond to, threats. While endpoint detection and response is not new to enterprise security, organizations have to improve network visibility, expand data collection and expand threat hunting capabilites if they want their XDR deployments to succeed. This issue of Tech Insights also includes: a market overview for XDR from Omdia, questions to ask before deploying XDR, and an XDR primer.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-9754
PUBLISHED: 2022-06-27
NAVER Whale browser mobile app before 1.10.6.2 allows the attacker to bypass its browser unlock function via incognito mode.
CVE-2022-33146
PUBLISHED: 2022-06-27
Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.
CVE-2022-33202
PUBLISHED: 2022-06-27
Authentication bypass vulnerability in the setup screen of L2Blocker(on-premise) Ver4.8.5 and earlier and L2Blocker(Cloud) Ver4.8.5 and earlier allows an adjacent attacker to perform an unauthorized login and obtain the stored information or cause a malfunction of the device by using alternative pat...
CVE-2022-2206
PUBLISHED: 2022-06-26
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-30932
PUBLISHED: 2022-06-26
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.