<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/"
    xmlns:wfw="http://wellformedweb.org/CommentAPI/"
    xmlns:dc="http://purl.org/dc/elements/1.1/"
    xmlns:atom="http://www.w3.org/2005/Atom"
    xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
    xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
    >
<channel>
    <title>SANS Penetration Testing</title>
    <atom:link href="http://pen-testing.sans.org/blog/pen-testing/feed" rel="self" type="application/rss+xml" />
    <link>http://pen-testing.sans.org/blog</link>
    <description>SANS Penetration Testing Blog</description>
    <lastBuildDate>Tue, 21 May 2013 12:46:42 +0000</lastBuildDate>
    <language>en</language><item><title>&quot;TDS, MSSQL, and Python... Oh My!&quot;</title><link>http://pen-testing.sans.org/blog/pen-testing/2013/05/21/tds-mssql-and-python-oh-my</link><comments>http://pen-testing.sans.org/blog/2013/05/21/tds-mssql-and-python-oh-my/#comments</comments><pubDate>Tue, 21 May 2013 11:23:07 +0000</pubDate><dc:creator>eskoudis</dc:creator><dc:category><![CDATA[Uncategorized]]></dc:category><description><![CDATA[[Editor's Note: Mark Baggett has been writing some awesome articles for this blog lately about how to use Python modules for all kinds of powerful penetration testing activities. This article is no exception -- in it, Mark details how to use the Impacket suite from Core Security to interact with Microsoft SQLServer databases. The article culminates with Mark creating a password guessing tool to go after the database... and the best part is that the conceptual model of his tool can be adapted to any kind of authenticating module you might have for Python. Nice work, Mark! --Ed.]By Mark BaggettWell, Alberto Solino and the good folks over at Core Security have released another update to the Python Impacket Module. The new update resolves an installation issue and makes the sample scripts even easier to use. To install it, simply download the latest tar ball from here:]]></description><wfw:commentRss>http://pen-testing.sans.org/blog/2013/05/21/tds-mssql-and-python-oh-my/feed</wfw:commentRss><comments>0</comments></item><item><title>&quot;Part 2: Quick and Useful Tricks for Analyzing Binaries for Pen Testers&quot;</title><link>http://pen-testing.sans.org/blog/pen-testing/2013/05/16/part-2-quick-and-useful-tricks-for-analyzing-binaries-for-pen-testers</link><comments>http://pen-testing.sans.org/blog/2013/05/16/part-2-quick-and-useful-tricks-for-analyzing-binaries-for-pen-testers/#comments</comments><pubDate>Thu, 16 May 2013 12:24:39 +0000</pubDate><dc:creator>eskoudis</dc:creator><dc:category><![CDATA[Uncategorized]]></dc:category><description><![CDATA[[Editor's Note: In his previous blog post, Yori Kvitchko provided a bunch of tips penetration testers could use to analyze binary files, focusing on network communications. This time around, Yori looks at application data files, a hugely important source of information that could include passwords, hashes, or other sensitive stuff leaking out of an application. The techniques Yori describes here are some important building blocks for all pen testers to apply to the applications we analyze. --Ed.]by Yori KvitchkoThis blog post is the second in a series of three blog posts dedicated to quick and useful techniques for analyzing binaries. In my first post, I talked about how penetration testers and other analysts can find and isolate network traffic generated by a binary. This time we'll look at pillaging the various data files   ...]]></description><wfw:commentRss>http://pen-testing.sans.org/blog/2013/05/16/part-2-quick-and-useful-tricks-for-analyzing-binaries-for-pen-testers/feed</wfw:commentRss><comments>0</comments></item><item><title>&quot;Netcat without -e?  No Problem!&quot;</title><link>http://pen-testing.sans.org/blog/pen-testing/2013/05/06/netcat-without-e-no-problem</link><comments>http://pen-testing.sans.org/blog/2013/05/06/netcat-without-e-no-problem/#comments</comments><pubDate>Mon, 06 May 2013 2:49:46 +0000</pubDate><dc:creator>eskoudis</dc:creator><dc:category><![CDATA[Backdoor]]></dc:category><dc:category><![CDATA[Methodology]]></dc:category><dc:category><![CDATA[Post Exploitation]]></dc:category><description><![CDATA[by Ed SkoudisMany pen testers know how to create a reverse backdoor shell with Netcat. But, what do you do if you have a Netcat that doesn't support the &amp;mdash;e or &amp;mdash;c options to run a shell? And, what if your target doesn't support /dev/tcp? In this article, I'll show you a nifty little work-around using some command-line kung fu with shell redirects.BackgroundNetcat is fantastic little tool included on most Linuxes and available for Windows as well. You can use Netcat (or its cousin, Ncat from the Nmap project) to create a reverse shell as follows:First, on your own pen test machine, you create a Netcat listener waiting for the inbound shell from the target machine:skodo@pentestbox# nc &amp;mdash;nvlp 443Here, I'm telling Netcat (nc) to not resolve names (-n), to be   ...]]></description><wfw:commentRss>http://pen-testing.sans.org/blog/2013/05/06/netcat-without-e-no-problem/feed</wfw:commentRss><comments>0</comments></item><item><title>&quot;Intentional Evil: A Pen Tester's Overview of Android Intents&quot;</title><link>http://pen-testing.sans.org/blog/pen-testing/2013/05/02/intentional-evil-an-pen-testers-overview-of-android-intents</link><comments>http://pen-testing.sans.org/blog/2013/05/02/intentional-evil-an-pen-testers-overview-of-android-intents/#comments</comments><pubDate>Thu, 02 May 2013 6:22:46 +0000</pubDate><dc:creator>eskoudis</dc:creator><dc:category><![CDATA[Methodology]]></dc:category><dc:category><![CDATA[Mobile]]></dc:category><description><![CDATA[[Editor's Note: Mobile devices, their associated infrastructures, and their juicy juicy apps are a fascinating arena that we pen testers are increasingly called upon to evaluate in target environments. In this article, Chris Crowley zooms in on a particularly important part of Android permissions known as &quot;intents&quot;, which help control interprocess communication. Chris describes their features and outlines a process and some tools penetration testers can use to analyze them. --Ed.]By Chris CrowleyGreat pen testers strive to move through target environments seamlessly, transitioning from one platform to another. With more organizations adopting a &quot;bring your own device&quot; approach to mobile platforms without careful enforcement of security, attackers have new avenues for undermining organizations. Even in those organizations that officially forbid personally owned mobile devices, employees still sometimes connect their own devices to their networks   ...]]></description><wfw:commentRss>http://pen-testing.sans.org/blog/2013/05/02/intentional-evil-an-pen-testers-overview-of-android-intents/feed</wfw:commentRss><comments>0</comments></item><item><title>&quot;The Bad Guys Are Winning, So Now What? Slides&quot;</title><link>http://pen-testing.sans.org/blog/pen-testing/2013/04/29/the-bad-guys-are-winning-so-now-what-slides</link><comments>http://pen-testing.sans.org/blog/2013/04/29/the-bad-guys-are-winning-so-now-what-slides/#comments</comments><pubDate>Mon, 29 Apr 2013 5:33:33 +0000</pubDate><dc:creator>eskoudis</dc:creator><dc:category><![CDATA[Methodology]]></dc:category><dc:category><![CDATA[Presentations]]></dc:category><description><![CDATA[By Ed SkoudisBelow are the slides for my talk called &quot;The Bad Guys Are Winning, So Now What?&quot; It's my most requested talk ever.In my job, I write two or three new presentations per year, and deliver each of them two or three times at various conferences before retiring the talk and moving onto another topic. My butterfly attention span doesn't let me stay on a particular topic for longer than that. In the past year, I've written talks titled &quot;Please Keep Your Brain Juice Off My Enigma&quot; (Debuted at SANS in Sept 2012 and posted here), &quot;Unleashing the Dogs of Cyber War&quot; (Debuted at BruCON in Sept 2012), and &quot;Kinetic Pwnage: Obliterating the Line Between Computers and the Physical World&quot; (Debuted at SOURCE Boston in April 2013 a week and a half ago).But, of all the talks I've ever written, there is one that I get more requests for than ever: my talk titled &quot;The Bad Guys Are Winning, So Now What&quot;. I originally wrote the talk a couple of years ago, and have   ...]]></description><wfw:commentRss>http://pen-testing.sans.org/blog/2013/04/29/the-bad-guys-are-winning-so-now-what-slides/feed</wfw:commentRss><comments>0</comments></item></channel></rss>