Cатсн²² (in)sесuяitу / ChrisJohnRiley

Because we're damned if we do, and we're damned if we don't!

Tag Archives: microtrash

UPDATE: New Advanced Penetration Testing Class from SANS

I posted a few weeks back about the new SANS SEC:660 class coming to the SANS London conference at the end of November. Last week I managed to get Stephen Sims (one of the authors of the new class) on the line to chat about what the new 6-day course is all about, and what it provides over and above the SANS SEC:560 class. We also talked about the fate of his SEC:709 “Developing Exploits for Penetration Testers and Security Researchers” class and how advanced exploit classes are a niche offering.

You can download the audio of my chat to Stephen through the Eurotrash Security Podcast feed (iTunes | XML Feed) or directly from here.

Stephen Sims will also be giving a SANS@night presentation at SANS London discussing “Microsoft Patch Analysis and Exploitation”.

If you’re looking for more information about the course or have any additional questions please feel free to checkout the course overview here or contact Stephen Sims directly through email (stephen@deadlisting.com)

Note: The new SANS SEC:580Metasploit Kung Fu for Enterprise Pen Testing” will also be running at SANS London… look for a review of the SEC:660 and SEC:580 courses once the conference concludes.

Eurotrash Microcasts – Shmoocon

Nothing in life goes completely to plan, and the Microcasts (affectionately called MicroTrash, by me at least) were nothing different. I had planned to collect a microphone I’d ordered and grab a few quiet moments at Shmoocon to chat to people and get some quick interviews. With that plan in my head, I firmly forgot my mic at the hotel, and when I did retrieve it, I had no time to talk to anybody. Still all was not lost. Since I got back from Washington I’ve taken the time to record a few interviews that I should have done while at Shmoocon. I’ve learnt a lot, about one-on-one interviewing, about editing, about iTunes and it’s tickled XML feed format… most of all, I’ve learnt that I say ahhhh and ummmm way too much!

Anyway, for those interested, here are direct links to the 3 Shmoocon Eurotrash Microcasts.

  • Microcast 1: An interview with Robin Wood – MP3
    • In this interview I chat to Robin Wood about his Social Zombies talk at Shmoocon, his current projects and what the future holds
  • Microcast 2: An interview with Dan Crowley – MP3
    • Dan was nice enough to run through his “Windows File Pseudonyms” talk and give some great technical content
  • Microcast 3: An interview with Doug Wilson – MP3
    • In the last of this series, I talked to Doug Wilson from Mandiant about the OWASP Broken Web Application project (http://owaspbwa.org)

Hopefully I’ll be a little more prepared for Blackhat Europe. Here’s hoping that I manage to record something.

Please let me know what you think of the Microtrash format –> feedback [AT] eurotrashsecurity [DOT] eu

If you want to subscribe to the Eurotrash Security Podcast, you can find it in iTunes, or just at the easy to find XML file to your favourite Podcast grabber