2020-009-Dave Kennedy, Offensive Tool release (Part 1)

<h2><span style="font-weight: 400;">Dave Kennedy (@hackingDave)</span></h2> <p><span style="font-weight: 400;">TrustedSec</span></p> <p><span style="font-weight: 400;">Released SEToolkit, Pentester Framework (PTF)</span></p> <p><span style="font-weight: 400;">PoC release for “Shitrix” bug (was disclosed after Google zero initiative India group)</span></p> <p><span style="font-weight: 400;">Jeff Snover, Lee Holmes - Powershell gods</span></p> <h2><span style="font-weight: 400;">Arguments against release</span></h2> <p><span style="font-weight: 400;">Tools are released are utilized by the ‘bad guys’</span></p> <p><span style="font-weight: 400;">Tooling makes it more difficult to fingerprint who are who they say they are “Fuzzy Weasel Vs. Psycho Toads”</span></p> <p><span style="font-weight: 400;">Makes the bad guys job harder by making them have to create the PoC (presumably most bad actors are skids)</span></p> <p><strong> </strong></p> <p> </p> <p><span style="font-weight: 400;">Arguments for release</span></p> <p> </p> <p><span style="font-weight: 400;">Tools allow for teaching Blue team, and SIEM/logging systems to understand </span></p> <p><span style="font-weight: 400;">Learning how something was created, being able to break down the vulnerability</span></p> <p><span style= "font-weight: 400;">https://www.bleepingcomputer.com/news/security/new-evasion-encyclopedia-shows-how-malware-detects-virtual-machines/</span></p> <p><br /> <br /></p> <p><span style="font-weight: 400;">Show #2:</span><span style= "font-weight: 400;"><br /></span><span style= "font-weight: 400;"><br /></span><span style= "font-weight: 400;">DerbyCom - Tell us about it</span></p> <p><span style="font-weight: 400;">Dave Kennedy Center for gaming and Leadship</span> <a href= "https://twitter.com/hackingdave/status/1220150360779710464?lang=en"> <span style= "font-weight: 400;">https://twitter.com/hackingdave/status/1220150360779710464?lang=en</span></a><span style="font-weight: 400;"> </span></p> <p> </p> <h2><span style="font-weight: 400;">Of