NIDAVELLIR — Criando ferramentas (armas?) poderosas - Nelson Brito

NIDAVELLIR — Criando ferramentas (armas?) poderosas More than ten years a prototype tool has been built, which was suppose to automate the penetration tests tasks... This prototype tool served as the basis for other projects that came along these years, such as: POP, ESF, T50 and Inception. Originally named Exploit Next Generation, the tool had a modular approach with 71 files and 13,552 lines of C code and Assembly, using a variety of techniques to successful exploit a vulnerability. This presentation will talk about how to create and build a working prototype tool, covering some basic and advanced concepts to illustrate the strategy adopted (fingerprinting, assembly components, shellcode, polymorphism, etc.) — half of the presentation will be code demonstration. Nelson Brito I'm merely another cybersecurity thinker and philosopher, occasionally researcher and enthusiast in a executive position, addicted to computer and network (in)security, being the creator of the T50 and the only Brazilian to speak at the extinct PH-Neutral (invite-only) in Berlin. As a sought-after speaker I've presented in some of the most notorious conferences in Brazil: BSides, H2HC, YSTS, ROADSEC, etc. My researches are: POP, ESF, T50 and Inception — highlight to T50, a tool widely used by companies validating their infrastructures, incorporated by ArchAssault, BackTrack, BlackArch, Debian, Kali and Ubuntu."