Training
Application Security
Application Security: For Hackers and Developers
Trainer: Jared DeMott
Jared DeMott is a PhD candidate at Michigan State University and a security researcher for Harris Crucial Security,Inc. He has spoken at security conferences such as Black Hat, Defcon, ToorCon, Shakacon, and DakotaCon.He is active in the offensive security community by teaching his Application Security course, and has co-authored a book on Fuzzing. Mr. DeMott has been an invited lecturer at prestigious institutions such as the United States Military Academy, and prior to Harris worked for the National Security Agency.
Description:
There are four technical skills required by security researchers, software quality assurance engineers, or developers concerned about security: Source code auditing, fuzzing, reverse engineering, and exploitation. All these skills and more are covered. C/C++ code has been plagued by security errors resulting from memory corruption for a long time. Problematic code is discussed and searched for in lectures and labs.
Fuzzing is a topic book author DeMott knows about well. Mutation file fuzzing and framework definition construction (Sulley and Peach) are just some of the lecture and lab topics. When it comes to reversing C/C++ (Java and others are briefly discussed) IDA pro is the tool of choice. Deep usage of this tool is covered in lecture and lab. Exploitation discussions and labs are the exciting final component. You’ll enjoy exploiting BSD local programs to Win7 browsers using the latest techniques.
Reverse Engineering
Students focus on learning to reverse compiled software written in C and C++, though half-compiled code is mentioned as well. The IDA pro tool is taught and used throughout. Callingconventions, C to assembly, indentifying and creating structures, RTTI reconstruction arecovered. Students will also use IDA’s more advanced features such as flirt/flare, scripting, and
plug-in creation.
Source Code Auditing
Understanding how and when to audit source code is key for both developers and hackers.Students learn to zero in on the important components of each language. Automated tools are mentioned, but auditing source manually is the focus, since verifying results is a required skill even when using the most advanced tools. Spotting and fixing bugs is the focus.
Fuzzing
Fuzzing is a runtime method for weeding out bugs in software, with a growing footprint within security companies and research communities. Techniques such as dumb file fuzzing, all the way up to intelligent network protocol fuzzing will be covered. Students will write and use various fuzzers to find bugs.
Exploitation
Students will walk out of this class knowing how to find and exploit bugs in software. This is useful to both developers and hackers. The exploit component will teach each common bug type including: stack overflows, function pointer overwrites, heap overflows, off-by-ones, FSEs, return
to libc, integer errors, uninitialized variable attacks, heap spraying, and ROP. Shellcode creation/pitfalls and other tips and tricks will all be rolled into the exciting, final component.
DOWNLOAD the entire Syllabus and Class Schedule.
No hard prerequisites, but helpful if:
Course Requirements:
In addition to course materials, some of the tools you get:
Dates: September 25 & 26, 2012
Meeting Time: 8:30 AM – 5:00 PM
DeVos Place (Room TBA) 303 Monroe Ave. Grand Rapids, MI 49503
Registration:
Price $1,400, Includes GA ticket for GrrCONRegistration is OPEN
Malware
Introduction to Malware Analysis
Trainer: Tyler Hudak
Tyler Hudak is a senior security consultant for KoreLogic
Security that has extensive real-world experience in malware analysis and incident handling for Fortune 500 firms. He has spoken and taught at a number of security conferences on the topics of malware analysis,
incident response and penetration testing. Tyler brings his front line experience and proven techniques to bear in the training.
Description: Course Content:
Due to the prevalence and business impact of malware, security professionals increasingly need the skills necessary to analyze worms, bots and trojan horses. This
course teaches the same concepts, techniques and processes for analyzing malware that are used by senior malware analysts and incident handlers. Students will take multiple “from-the-wild” malware samples in a hands-on environment and learn how to analyze their characteristics and behavior to determine what they do and what risk they present pre-requisites to successful remediation.
The following is an outline of the course content, but is not indicative of the only material that will be presented:
Prerequisites:
No previous experience in malware analysis is necessary as this course is designed for those who have never performed it before. High-level understanding of malware is recommended.
Course Requirements: Participants will get:
Students will be required to bring their own laptops for the class. Laptops will need a VMWare Workstation or VirtualBox installation with an install of Windows XP as the guest OS prior to the class. If the base OS is Windows, an installation of Cygwin may be helpful as well. All other tools will be provided.
Course Length & Location:
Dates: September 25 & 26, 2012
Meeting Time: 9:00 AM – 5:00 PM
DeVos Place (Room TBA)
303 Monroe Ave.
Grand Rapids, MI 49503
Registration:
Price $750, Includes GA ticket for GrrCON
Registration is OPEN
Advanced Wi-Fi Penetration Testing
Advanced Wi-Fi Penetration Testing
Trainer: Vivek Ramachandran
Vivek has been involved in security research, product development, penetration testing and evangelism for over a decade now. He discovered the Caffe Latte attack and also broke WEP Cloaking, a WEP protection schema in 2007 publicly at Defcon and introduced the concept of pure Wi-Fi based malware and worms. He is also the author of the book “Wireless Penetration Testing using BackTrack 5″ which has received great appreciation by the worldwide security and hacker community. His second book – “Metasploit Megaprimer ” is due for launch in February 2012.
Vivek’s work on wireless security has been quoted in BBC online, InfoWorld, MacWorld, The Register, IT World Canada etc. places. This year he is speaking or training at a number of security conferences, including Blackhat USA and Abu Dhabi, Defcon, Hacktivity, Brucon, C0C0n, SecurityZone, SecurityByte etc.
Description: Course Content:
Wi-Fi has become ubiquitous in our lives today. However, the flexibility and mobility provided by Wi-Fi comes at a cost – inherent insecurity! This workshop will provide a highly technical and in-depth treatment of Wi-Fi security. The emphasis will be to provide the participants with a deep understanding of the principles behind various attacks and not just a quick how-to guide on publicly available tools.
We will start our journey with the very basics by dissecting WLAN packet headers with Wireshark, then graduate to the next level by cracking WEP, WPA/WPA2 and then move on to real life challenges like orchestrating Man-in-the-Middle attacks, creating Wi-Fi Backdoors and solving some live CTF style challenges together!
A non-exhaustive list of topics include:
Wireless LAN Basics:
Course Material:
Prerequisites:
Course Requirements:
Participants will learn:
Course Length & Location:
Dates: September 25 & 26, 2012
Meeting Time: 8:30 AM – 5:00 PM
DeVos Place (Room TBA) 303 Monroe Ave. Grand Rapids, MI 49503
Registration:
Price $1,500, Includes GA ticket for GrrCONRegistration is CLOSED
Teensy
Teensy programming for everyone
Trainer: Nikhil Mittal
Nikhil Mittal is a hacker, info sec researcher and enthusiast. His area of interest includes penetration testing, attack research, defense strategies and post exploitation research. He has many years of experience in Penetration Testing of many Government Organizations of India and other global corporate giants.
He specializes in assessing security risks at secure environments which require novel attack vectors and “out of the box” approach. He has worked extensively on using HID in Penetration Tests and is creator of Kautilya, a toolkit which makes it easy to use Teensy in penetration tests. In his free time, Nikhil likes to scan full IP ranges of countries for specific vulnerabilities, writes some silly Metasploit scripts and does some vulnerability research. He has spoken at Clubhack’10, Hackfest’11, Clubhack’11, Black Hat Abu Dhabi’11, Troopers’12 and Black Hat Europe’12
Description: Course Content:
Getting into systems is getting harder by day using traditional methods. As a penetration tester or a security administrator you should know what methods an attacker may use to compromise a system. The emphasis of this training will be on using Teensy which is a Human Interface Device. It is an Arduino board based device which can be programmed and used as a keyboard and mouse. Details about Kautilya will be discussed which is a toolkit developed by the trainer which eases the use of Teensy in Penetration Tests. The participants will learn about programming Teensy as per their need using Arduino and also to customize Kautilya. There will be lots of attack vectors, discussions, hands on and fun. Participants should be able to program their own devices after the training.
Prerequisites:
Course Requirements:
Participants will get:
Course Length & Location:
Dates: September 25 & 26, 2012
Meeting Time: 9:00 AM – 5:00 PM
DeVos Place (Room TBA) 303 Monroe Ave. Grand Rapids, MI 49503
Registration:
Price $1,500, Includes GA ticket for GrrCON & Free Teensy++ board with USB CableRegistration is OPEN
C|EH
Certified Ethical Hacker (CEH) V7 (Courseware Included)
Provided by: TBA
Description:
This class will immerse the student into an interactive environment where they will be shown how to scan, test, hack and secure their own systems. Students then learn how intruders escalate privileges and what steps can be taken to secure a system.
Who Should Attend: Course Length:
Dates: TBA Course Location:
TBA
Registration:
TBA
This course environment gives each participants in-depth knowledge and practical experience with the current essential security systems. They will also learn about Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows and Virus Creation.
You Will Receive With This Course:
Free Certified Ethical Hacker Courseware
Free admission to GrrCON (details to be provided in class)
This course will significantly benefit security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure.
Time: TBA
Registration is not yet open
