Friday, April 19, 2013

All, I noticed a tweet by HD Moore today giving a shout out to this post written last week by Ed Skoudis. Very good read. Here's a link and an excerpt:

http://pen-testing.sans.org/blog/pen-testing/2013/04/08/when-offense-and-defense-become-one

"at sufficiently advanced technical levels, offense and defense sometimes merge and become one. Offensive techniques can be used to achieve defensive ends; defensive means can be used to achieve offensive ends; and, sometimes, the inherent technical skills of offense and defense are actually identical."


"Consider these examples:
  • Endpoint security suites: Have you ever pondered what these tools really are? With their integrated anti-virus, personal firewall, and host-based Intrusion Prevention Systems, they operate at a fairly low-level of most operating systems, hooking all kinds of system calls so that administrators can maintain control of the machine. Wait... that's a rootkit! The only difference between an endpoint security suite and most rootkits is the level of functionality and who controls it: good guy administrators or bad guys. So, we've got a multi-billion dollar segment of the infosec industry that is actually built on selling commercial rootkits, also known as endpoint security suites."
Ed Skoudis is a very dynamic teacher there at SANS, and I recommend his courses to everyone.

16 comments:

  1. This is interesting. I didn't know of Skoudis, but will follow him now.

    Also, I should note that this not only happens on «sufficiently advanced technical levels» (or at least, that the definition of «technical» doesn't restrict itself to IT. Anyone trained in martial arts knows that defense and offense are basically the same actions applied to different purposes.

    ReplyDelete
    Replies
    1. Hello Everyone !

      USA SSN Leads/Fullz available, along with Driving License/ID Number with good connectivity.

      All SSN's are Tested & Verified.

      **DETAILS IN LEADS/FULLZ**

      ->FULL NAME
      ->SSN
      ->DATE OF BIRTH
      ->DRIVING LICENSE NUMBER
      ->ADDRESS WITH ZIP
      ->PHONE NUMBER, EMAIL
      ->EMPLOYEE DETAILS

      *Price for SSN lead $2
      *You can ask for sample before any deal
      *If you buy in bulk, will give you discount
      *Sampling is just for serious buyers

      ->Hope for the long term business
      ->You can buy for your specific states too

      **Contact 24/7**

      Whatsapp > +923172721122

      Email > leads.sellers1212@gmail.com

      Telegram > @leadsupplier

      ICQ > 752822040

      Delete
    2. 7 Habits Of Highly Effective Hackers >>>>> Download Now

      >>>>> Download Full

      7 Habits Of Highly Effective Hackers >>>>> Download LINK

      >>>>> Download Now

      7 Habits Of Highly Effective Hackers >>>>> Download Full

      >>>>> Download LINK ys

      Delete
  2. Collections from the design labels such as Cheap TRX and other beauty are released after every six months.
    With every new launch, a new trx pas cher technology is developed.
    This had led to making trx pas cher remain competitive in the International market.
    The entire penny board hot sale packaging process is paid into detail to enhance the collections quality and appearance.
    Now everyone can own high-end designer Cheap TRX For Sale.
    cheap trx being one of the largest and most prominent fashion company in the world, it has an obligation of beating the standards set by others.
    The fashion world, with a higher concentration on trx france, needs to provide the best packaging services that the modern world has ever seen.
    cheap trx plays a major role in creating a brand name that fashion lovers want to identify with.

    ReplyDelete
  3. Have used AVG security for a couple of years, I'd recommend this product to all of you.

    ReplyDelete
  4. You can give personal touch to your Hotmail account by configuring its settings, but you have to make sure that you don’t commit any mistake in it. For an error free email setting you can take help from our service agents by dialing them at 0800-029-4639.
    Hotmail Support Number UK

    ReplyDelete
  5. Hello Everyone !

    USA SSN Leads/Fullz available, along with Driving License/ID Number with good connectivity.

    All SSN's are Tested & Verified.

    **DETAILS IN LEADS/FULLZ**

    ->FULL NAME
    ->SSN
    ->DATE OF BIRTH
    ->DRIVING LICENSE NUMBER
    ->ADDRESS WITH ZIP
    ->PHONE NUMBER, EMAIL
    ->EMPLOYEE DETAILS

    *Price for SSN lead $2
    *You can ask for sample before any deal
    *If you buy in bulk, will give you discount
    *Sampling is just for serious buyers

    ->Hope for the long term business
    ->You can buy for your specific states too

    **Contact 24/7**

    Whatsapp > +923172721122

    Email > leads.sellers1212@gmail.com

    Telegram > @leadsupplier

    ICQ > 752822040

    ReplyDelete
  6. One of our visitors recently recommended the following website. 메이저사이트

    ReplyDelete
  7. Very informative blog article. Thanks Again. Keep writing. 경마사이트

    ReplyDelete
  8. Some truly superb blog posts on this website , thanks for contribution. 카지노

    ReplyDelete
  9. I simply want to tell you that I am just beginner to blogs and certainly enjoyed you’re web page. 먹튀검증디비

    ReplyDelete
  10. 7 Habits Of Highly Effective Hackers >>>>> Download Now

    >>>>> Download Full

    7 Habits Of Highly Effective Hackers >>>>> Download LINK

    >>>>> Download Now

    7 Habits Of Highly Effective Hackers >>>>> Download Full

    >>>>> Download LINK rO

    ReplyDelete
  11. Hii
    Thank you for sharing this information. Exploring the '7 Habits of Highly Effective Hackers,' this topic delves into the key practices and behaviors of successful individuals in the dynamic field of hacking and cybersecurity. Here is sharing some Salesforce Admin and App Builder Training Course journey information may be its helpful to you.

    Salesforce Admin and App Builder Training

    ReplyDelete