from russia with love.exe pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... ·...
TRANSCRIPT
![Page 1: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/1.jpg)
From Russia with love.exe
Pt. 2Underground Hacking Forums from Former East Bloc
Thursday, July 1, 2010
![Page 2: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/2.jpg)
Shhpeakers.. :)
Thursday, July 1, 2010
![Page 3: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/3.jpg)
FY & grugq
Two lingual experts well known for their skillful tongues, the grugqand fyodor have spent 6 months actively monitoring dozens ofrussian web forums to uncover the secrets of the russian hackerculture. This talk focuses on new threats and trends which arediscussed in the open on these sites,but are generally inaccessibleto the larger security community due to the language barrier.Ladies! Ask about our private demonstrations! :D
Thursday, July 1, 2010
![Page 4: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/4.jpg)
Outline
• Hax0r Revolution Intro
• Intelligence: Digging in a pile of trash
• Personalities, Lingo, Monetization
• Technology behind: Tools of trade
• Future Plans
Thursday, July 1, 2010
![Page 5: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/5.jpg)
Hax0r Revolution
Thursday, July 1, 2010
![Page 6: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/6.jpg)
Hax0r Revolution
• 100% money-driven
• Prerequisites:
• Imbalance of Economic system
• Globalization of payment systems
• Accessibility
• Laws, Languages, Cold War, ...
Thursday, July 1, 2010
![Page 7: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/7.jpg)
Revolutionist targets
• Average PC users (your mom and dad)
• Rarely - corporations
Thursday, July 1, 2010
![Page 8: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/8.jpg)
You being 0wn3d
• Exploiting vulnerabilities in Client software (mostly browsers, browser’s add-ons, browser’s plugins, ..)
• Social engineering (computer users are dumb) -> “fake av software”, .pdf.exe things and other old tricks
Thursday, July 1, 2010
![Page 9: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/9.jpg)
Peeking behind the scene
• Looking at the market
• Items and patterns of trade
• Personalities
• Quantified analysis
Thursday, July 1, 2010
![Page 10: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/10.jpg)
Digging in a pile of trash
Thursday, July 1, 2010
![Page 11: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/11.jpg)
Forums
Thursday, July 1, 2010
![Page 12: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/12.jpg)
Need for Automation• Massive amounts of content
• Over 10 top level domains
Multiple sub forums
Thursday, July 1, 2010
![Page 13: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/13.jpg)
Manually
• Natural language
• Too complicated for automated processing
• Misspellings, multiple spellings
• Unformatted postings
Thursday, July 1, 2010
![Page 14: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/14.jpg)
AmusingDiscoveries
Thursday, July 1, 2010
![Page 15: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/15.jpg)
Personalities
Thursday, July 1, 2010
![Page 16: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/16.jpg)
Thursday, July 1, 2010
![Page 17: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/17.jpg)
Geeks, not Gangsters
Thursday, July 1, 2010
![Page 18: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/18.jpg)
Gangsters
Thursday, July 1, 2010
![Page 19: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/19.jpg)
Thursday, July 1, 2010
![Page 20: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/20.jpg)
Thursday, July 1, 2010
![Page 21: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/21.jpg)
ExtremelyNonprofessional
Criminals
Thursday, July 1, 2010
![Page 22: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/22.jpg)
Geeks
Thursday, July 1, 2010
![Page 23: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/23.jpg)
Lingo
Thursday, July 1, 2010
![Page 24: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/24.jpg)
What does this say?
Thursday, July 1, 2010
![Page 25: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/25.jpg)
Can Google help?
Thursday, July 1, 2010
![Page 26: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/26.jpg)
Good luck with that.
Thursday, July 1, 2010
![Page 27: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/27.jpg)
Just FYI
Thursday, July 1, 2010
![Page 28: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/28.jpg)
Hacker Slang
• Fenya - Russian prison slang
• Anglonims - English loan words
• Rhyming slang - Sounds like the English word
• Direct translation
Thursday, July 1, 2010
![Page 29: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/29.jpg)
Scams & Schemes
Thursday, July 1, 2010
![Page 30: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/30.jpg)
Wheres money?
• Extortion
• Job recruitment (Partnerkas, Drops, SMS regs, ..)
• Services
• Goods
Thursday, July 1, 2010
![Page 31: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/31.jpg)
Extortion
• Malware that demands payment
• Fake windows “warning”
Thursday, July 1, 2010
![Page 32: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/32.jpg)
Extortion
Thursday, July 1, 2010
![Page 33: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/33.jpg)
Partnerka
Thursday, July 1, 2010
![Page 34: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/34.jpg)
Partnerka
• Credit card payment gateways
• Visa / Mastercard regulation compliant
• PCI compliant
• Partnerships with webmasters and other scum
• Percentage payouts for purchases
Thursday, July 1, 2010
![Page 35: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/35.jpg)
Thursday, July 1, 2010
![Page 36: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/36.jpg)
Partnerka Payouts
Thursday, July 1, 2010
![Page 37: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/37.jpg)
SMS scams :)
Thursday, July 1, 2010
![Page 38: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/38.jpg)
Cash Out
Thursday, July 1, 2010
![Page 39: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/39.jpg)
Thursday, July 1, 2010
![Page 40: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/40.jpg)
“Дроп”
• -> STORE -> DROP (share) ->
Thursday, July 1, 2010
![Page 41: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/41.jpg)
Virtual Currencies
• Online payment systems for service transactions
• Web Money
• Yandex Money
• eGold [dead]
Thursday, July 1, 2010
![Page 42: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/42.jpg)
Conversion Gateway
Thursday, July 1, 2010
![Page 43: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/43.jpg)
Web Money offices
Thursday, July 1, 2010
![Page 44: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/44.jpg)
Goods
Thursday, July 1, 2010
![Page 45: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/45.jpg)
Skype
Thursday, July 1, 2010
![Page 46: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/46.jpg)
iTunes cards
Thursday, July 1, 2010
![Page 47: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/47.jpg)
Loaders, ExploitKits, ...
Thursday, July 1, 2010
![Page 48: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/48.jpg)
Passports
Thursday, July 1, 2010
![Page 49: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/49.jpg)
CCs
Thursday, July 1, 2010
![Page 50: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/50.jpg)
Equipment
Thursday, July 1, 2010
![Page 51: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/51.jpg)
[websites go here]
Thursday, July 1, 2010
![Page 52: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/52.jpg)
Identity Services
Thursday, July 1, 2010
![Page 53: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/53.jpg)
Complete Package
Под средства любой загрязненности! В комплект входит: 1.Банковский акк(online доступ) 2.АТМ картa(Дневной лимит на снятие средств 1000$/6000$ В МЕСЯЦ-Возможно увеличение лимита +30$-) 3.Карта кодов (для online доступа) 4.Копия паспорта дропа 5.Sim-ka
Thursday, July 1, 2010
![Page 54: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/54.jpg)
Thursday, July 1, 2010
![Page 55: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/55.jpg)
How long does it take to find a usable CC?
Thursday, July 1, 2010
![Page 56: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/56.jpg)
5 seconds
Thursday, July 1, 2010
![Page 57: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/57.jpg)
first link...
Thursday, July 1, 2010
![Page 58: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/58.jpg)
and washing service..
Thursday, July 1, 2010
![Page 59: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/59.jpg)
Traffic Generation
•Best Prices•Fast Stream•Best “Conversion”/Infection Ratio
Thursday, July 1, 2010
![Page 60: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/60.jpg)
Infection: rates and nums
Thursday, July 1, 2010
![Page 61: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/61.jpg)
how much to take down twitter?
Thursday, July 1, 2010
![Page 62: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/62.jpg)
Avg. US$80 per diem
Thursday, July 1, 2010
![Page 63: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/63.jpg)
Question
Thursday, July 1, 2010
![Page 64: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/64.jpg)
why was twitter down?
Thursday, July 1, 2010
![Page 65: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/65.jpg)
cuxumu
Thursday, July 1, 2010
![Page 66: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/66.jpg)
Technology:Tools of Trade
Overview & demos
Thursday, July 1, 2010
![Page 67: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/67.jpg)
Intelligence Gathering
• Automated and manual analysis of publicly available data
Thursday, July 1, 2010
![Page 68: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/68.jpg)
Tools of trade
• Mostly open-source. With custom extensions
Thursday, July 1, 2010
![Page 69: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/69.jpg)
Tools: Nutch
• Content Fetcher; extended with custom Indexers
• Changes to Spider behavior (“proper” robots.txt handling etc)
• Custom “Seeders”
• Distributed Indexing (w/ hadoop)
Thursday, July 1, 2010
![Page 70: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/70.jpg)
Tools: RSS feeds “eater”
• A bunch of python scripts thrown together to fetch rss feeds
Thursday, July 1, 2010
![Page 71: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/71.jpg)
Google App Engine
• Public Interface with transforms, dictionaries and other misc. Stuff.
Thursday, July 1, 2010
![Page 72: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/72.jpg)
Tools: SOLR
• Customized Data indexing and search
• Custom schema and search fields
• JSON output used
• Language “projection” (lingo/slang support)
Thursday, July 1, 2010
![Page 73: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/73.jpg)
Tools: Web UI/Maltego
• Web UI: easier
• Visualization: Maltego Custom Transforms
Thursday, July 1, 2010
![Page 74: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/74.jpg)
Overall picturesque
Thursday, July 1, 2010
![Page 75: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/75.jpg)
Maltego
Thursday, July 1, 2010
![Page 76: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/76.jpg)
Lets look at some %^@%#
Thursday, July 1, 2010
![Page 77: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/77.jpg)
Future Plans
Thursday, July 1, 2010
![Page 78: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/78.jpg)
Future Integration
• Maltego and other viz. tools
• Online Engine Availability
• Scale more, dig more ;-)
• Feed “eaters” (BBSes hear me?;))
• MultiLang: Spanish/Italian/Portuguese
Thursday, July 1, 2010
![Page 79: From Russia with love.exe Pt. 2conference.hackinthebox.org/hitbsecconf2010ams/materials... · 2017-10-15 · FY & grugq Two lingual experts well known for their skillful tongues,](https://reader034.vdocuments.mx/reader034/viewer/2022042409/5f2530c9ba4f7c66aa2f523d/html5/thumbnails/79.jpg)
Availability
• http://www.o0o.nu/projects/intelligence-collection - tools, slides, howto’s etc
• http://383rat.appspot.com - transforms on GAE, indexes, dictionaries etc
Thursday, July 1, 2010