DC612

May 9th Meeting 6pm @ Elsies

jaredbird — Mon, 29 Apr 2013 00:17:38 +0000

For the May DC612 meeting, Paul Dokas will be presenting on the new Dragon Research Group (DRG) pod distro. The Dragon Research Group (DRG) is a volunteer group of security researchers that collect and freely distribute intelligence regarding malicious behavior seen online. One of the key platforms used to collect and analyze this data is the DRG pod which is a passive sensor built using NanoBSD (a slimmed down version of FreeBSD). This talk will cover the design goals, system layout, build system and future directions for the pods.

Bio: Paul Dokas is an IT security professional with 20+ years of experience in the IT industry as an IT security architect and analyst, programmer, and system administrator. Currently working in the Twin Cities as an senior IT security analyst he is expanding his passion for intrusion detection, data analysis and incident response. In off hours, he volunteers with the DRG and is building a network intrusion sensor and analysis framework (soon to be released as open source).

Agenda:

6:00PM-6:30PM – Get in, get drinks and food ordered

6:30PM-???? – Paul Dokas

Elsie’s Restaurant Bar and Bowling
729 MarshallStreet N.E.,
Minneapolis, MN 55413

No April DC612 Meeting

jaredbird — Tue, 09 Apr 2013 15:10:37 +0000

We are not going to have an April DC612 meeting as we didn’t receive any volunteers to present on a topic this month. If you have a topic you would like to present on at a future DC612 or are working on a project that you would like to solicit some feedback on, please email us at info – at – dc612.org.

Also, don’t forget about the Minne-Faire happening THIS WEEKEND at The Hack Factory! More info can be found here: http://minnefaire.org/

Thanks

-DC612

DEF CON 20 Badge Hacking

videoman — Thu, 14 Mar 2013 17:01:12 +0000

We are doing DEF CON 20 badge hacking at The Hack Factory tonight! Anyone is welcome to come by and hang out, so far all of the preregistration badges have been taken! Were going to solder on the VGA and PS/2 connectors, and post some fun info on what we did after the event!

See you tonight, after 6pm.

-David

No February Meeting

jaredbird — Wed, 13 Feb 2013 00:34:31 +0000

We are not going to have a February meeting. Stay home, stay warm, and enjoy Valentines Day. We will see you in March for the badge hacking night (details below):

Let’s hack some DEF CON XX badges!

DC612 is holding a badge hacking workshop! Wanna have fun and setup a commodore 64 emulator on your Defcon XX badge! Now is the time! DEF CON donated 30 extra badges (CDs and Programs too!). Their only request was that we post (Blog, Social Media, Office Xerox, etc) about your project or board when we complete it.

We are asking $5-$10, but you can always add more, as the donation goes directly to the Hack Factory. Each ticket comes with a badge. You will need to pay cash for the badge when you arrive, as we get chraged $1 for each ticket we sell via eventbrite. We’ve also setup individual badge tickets. So say you wanted a Human badge- design #1, well you can use that as your ticket and we will make sure you get that badge.

These were donated by DEF CON for us to play with. To order more and check out the designs, visit: http://hackerstickers.com/product/hardware-dc20-humanbadge/

- DC612

DC612 Day: March 9th 2013

jaredbird — Wed, 16 Jan 2013 01:42:14 +0000

This event is a one day hands-on learning conference that unlike traditional conferences, this event is geared towards hands-on learning. The topics selected are based in input from the community via survey that was completed last fall. Below is the schedule for the day. A buffet style lunch will be provided during the lunch break.

Schedule:

8:30am-9am – Get in, get settled (pastries and coffee available)
9am-12pm - Hands on Penetration Testing 101 by Scott Sutherland & Karl Fosaaen
12pm-1pm – Lunch (provided by Elsie’s)
1pm-3pm - Web Application Security: OWASP Top 10 by Brian Johnson
3pm-3:15pm – Break
3:15pm-5pm - Challenge Walk-through by Spenser Reinhardt

Beverages will be available all day. Soda is included with admission, beer/liquor is not.

Registration: http://dc612day.eventbrite.com/

Session Details:

Title: Hands on Penetration Testing 101 by Scott Sutherland & Karl Fosaaen

Abstract: The goal of this training is to introduce attendees to standard penetration test methodologies, tools, and techniques. Hands on labs will cover the basics of asset discovery, vulnerability enumeration, system penetration, privilege escalation, and bypassing end point protection. During the labs, common vulnerabilities will be leveraged to illustrate attack techniques, using freely available tools such as Nmap and Metasploit. This training will be valuable to anyone interested in gaining a better understanding of penetration testing or to system administrators trying to understand common attack approaches.

Requirements: All attendees interested in participating in the labs will need to bring their own laptop. A copy of BackTrack will be provided to all attendees on a USB flash drive that they can keep. Laptops should have a wired Ethernet port in order to participate in labs.

Title: Web Application Security: OWASP Top 10 by Brian Johnson

Abstract: In this session we will learn how to find, demonstrate how to exploit and discuss how to prevent the OWASP Top 10 Security Issues. We will also discuss how these issues are exploited in the real world. Students will have the opportunity to have hands on experience testing for and exploiting these issues.

Requirements: All attendees interested in participating in the labs will need to bring their own laptop. Laptops should have a wired Ethernet port in order to participate in labs.

Title: Challenge Walk-through by Spenser Reinhardt

Abstract: Capture the flag challenges, are no easy task and can require vast and intimate knowledge of many different aspects of computer systems. This session will guide participants through a variety of challenges, ranging from application exploitation, forensic image recovery, cryptography, and binary reverse engineering. Each task will be challenging and presents something new to learn. By the end, you should have a basic idea of how capture the flag events work, what to expect and an understanding of how to complete a variety of challenge types.

Requirements: All attendees interested in participating in the labs will need to bring their own laptop. Laptops should have a wired Ethernet port in order to participate in labs.

January 10th Meeting 6pm @ The Hack Factory

jaredbird — Thu, 03 Jan 2013 03:15:09 +0000

This month we are going to be messing around with the Raspberry Pi devices. There will be informal demos so if you have one, bring it and share what you have done with it. Have another device/project you have been working on, bring it in and tell us about it.

As always, The Hack Factory doesn’t have a bar, so bring your own food & beer and remember, there are no maids on the Hack Factory payroll, so you need to clean up after yourself.

Agenda:

6PM-??? – Raspberry Pi Demos/Other projects

See you Thursday!

-DC612

Hack Factory is located in the Seward neighborhood.

3119 East 26th ST

Minneapolis, MN 55418.

http://dc612.org

http://twitter.com/dc612

http://groups.google.com/group/dc612

Save the date – DC612 Day – March 9th 2013

jaredbird — Sat, 01 Dec 2012 21:08:09 +0000

Thank you to all who responded to our survey! It appears that there is sufficient interest for a one day hands-on event. We are planning on holding the event on March 9th, 2013. Based on the survey results, we are going to cover challenge walk-through, vulnerability scanning, and exploitation during this one day hands-on learning event. More details and registration will be available in the upcoming weeks. Below are the results of two of the questions asked on the survey:

Dec 13th Meeting 6pm @ Elsies

jaredbird — Mon, 26 Nov 2012 20:47:48 +0000

This month we will have Jay Jacobs presenting on the following (as written by Jay himself):

I’d like to geek out on data analysis and data visualization, primarily around data I’ve collected myself or gotten through my work on the Verizon RISK team. I’ll cover some basic guidelines when communicating with data as well as some common pitfalls and solutions. I’ll cover some tools out there folks can use and if the demo gods smile, maybe even run through some live data.

Jay Jacobs is a cryptonerd turned data geek. He is a principal on the Verizon RISK Team where he plays with data for the Data Breach Investigation Report and other research efforts. Jay also serves on the board of the Society of Information Risk Analysts and is currently studying applied statistics at Penn State.

Agenda:

6:00PM-6:30PM – Get in, get drinks and food ordered

6:30PM-???? – Jay Jacobs

Elsie’s Restaurant Bar and Bowling
729 MarshallStreet N.E.,
Minneapolis, MN 55413

Update: November 8th Meeting 6pm @ Hack Factory

jaredbird — Sat, 27 Oct 2012 03:29:59 +0000

We will not be meeting at Elsie’s on Nov 8th. Why? Scheduling conflicts…. Elsie’s is kind enough to let us use their banquet room for free, so when a customer willing to pay for the room requests the banquet room, we get the boot. There was originally a party that was taking place on Nov 8 in the banquet room until 6:30pm, however they have extended their party, forcing us out.

Instead:

This month we are going to be building some throwing star lan taps that we never got around to doing last month, and working on any other projects that we haven’t had time to work on. We will be meeting at the Hack Factory at 6pm. Feel free to bring any project you want to work on, or even one you already completed, but think it is worth showing off. Or if you want, just come and hang out.

As always, The Hack Factory doesn’t have a bar, so bring your own food & beer and remember, there are no maids on the Hack Factory payroll, so you need to clean up after yourself.

Agenda:

6PM-??? – LAN Tap builds/Other projects

See you Thursday!

-DC612

Hack Factory is located in the Seward neighborhood.

3119 East 26th ST

Minneapolis, MN 55418.

http://dc612.org

http://twitter.com/dc612

http://groups.google.com/group/dc612

DC612 Day of Learning

jaredbird — Sun, 21 Oct 2012 19:28:45 +0000

We are looking at putting together a “Day of Learning” and would like to gauge the amount of interest. This would be similar to the hands-on challenge walk-through meetings we have had recently during DC612, except an entire day. This is not like a typical conference where the presenter talks about a topic and you sit and listen. The DC612 day of learning will consist of 3 or 4 sessions of actual hands-on activities being led by a presenter.

Please fill out the form located at the following url to help us gauge the amount of interest in an event like this:

https://docs.google.com/spreadsheet/viewform?formkey=dGdtb1ZmLXdtR1lyUHJPallEVndUVGc6MQ

Thanks in advance,

-DC612

Oct 13th Balloon Launch Change in Location

jaredbird — Mon, 08 Oct 2012 17:58:23 +0000

The location of the balloon launch this Saturday, October 13th has changed to Lake Junior High School in Woodbury. We received a call from the City of Woodbury informing us that there will be little league games at Bailey Elementary, so we decided to move it. Address below:

11 am – balloon launch

11:30 – ????? Tracking the payload

Lake Jr. High

3133 Pioneer Drive Woodbury, MN 55125

Everyone is welcome. See you there!

-DC612

Oct 11th Meeting 6pm @ Hack Factory

jaredbird — Wed, 03 Oct 2012 00:20:23 +0000

This month we are going to be doing another project night and prepping for the launch of our video/picture taking space-bound sounding balloon. We are planning on launching the balloon Saturday Oct 13th at 11am from Bailey Elementary School in Woodbury. So what is this whole balloon thing? Several people have done it before and it sounded cool, so we decided that we wanted to do it too. The plan is to fill a HUGE balloon with helium and attach a payload including a camera and a cell phone with GPS tracking into space to get some cool pictures/video. Sound like fun to you? We will be getting last minute prep done during DC612 on the 11th, then launching it on the 13th.

*Note: We are still awaiting final approval from the FAA for the launch. We have to get their approval as the balloon is expected to burst at 68,000+ feet.

As always, The Hack Factory doesn’t have a bar, so bring your own food & beer and remember, there are no maids on the Hack Factory payroll, so you need to clean up after yourself.

Agenda:

6PM-??? – Project Night/Balloon Prep

See you Thursday!

-DC612

Hack Factory is located in the Seward neighborhood. Enter via the yellow side door.

3119 East 26th ST

Minneapolis, MN 55418.

http://dc612.org

http://twitter.com/dc612

http://groups.google.com/group/dc612

September 13th Meeting 6pm @ Elsie’s

jaredbird — Sat, 01 Sep 2012 22:49:55 +0000

Back by popular demand, this month, we will be working through more of the exploit-exercises.com challenges. This time, taking a look at different privilege escalation techniques. Anything from SUID set binarys, modifying cron jobs with better rights, race conditions and more! Please download the Nebula virtual machine and be sure it works with your virtualization software, before coming to the meeting. You will also need virtual box or vmware, both have a free option that will work perfect. A backtrack virtual machine is also suggested, otherwise a host Linux\Mac OS is suggested.
Exploit-exercises Nebula: http://exploit-exercises.com/nebula
Backtrack Linux: http://www.backtrack-linux.org/downloads/
VMware Player: https://my.vmware.com/web/vmware/free#desktop_end_user_computing/vmware_player/5_0
VirtualBox: https://www.virtualbox.org/wiki/Downloads

Agenda:

6:00PM-6:30PM – Get in, get drinks and food ordered

6:30PM-???? – Challenge walkthroughs

-DC612

Elsie’s Restaurant Bar and Bowling
729 MarshallStreet N.E.,
Minneapolis, MN 55413

August 9th Meeting 6:30pm The Hack Factory

jaredbird — Mon, 06 Aug 2012 01:52:43 +0000

This month we are going to be doing a recap of DEF CON 20. Did you see a talk that really sparked your interest in something, or maybe you played in a contest that you thought was awesome, whatever your experience, please come share. Or maybe you missed out…. feel free to come and learned what you missed out on.

As always, The Hack Factory doesn’t have a bar, so bring your own food & beer and remember, there are no maids on the Hack Factory payroll, so you need to clean up after yourself.

Agenda:

6:30PM-??? – DEF CON recap/discussion

See you Thursday!

-DC612

Hack Factory is located in the Seward neighborhood. Enter via the yellow side door.

3119 East 26th ST

Minneapolis, MN 55418.

http://dc612.org

http://twitter.com/dc612

http://groups.google.com/group/dc612

July 12th Meeting 6pm @ The Hack Factory

jaredbird — Tue, 03 Jul 2012 17:28:40 +0000

This month we are going to do a project/show and tell meeting again. This is a great opportunity to work on that project that you really want to work on, but just havent had the time for (raspberry pi, open-mesh ap flashing, etc). So if you are like me and have some sort of project to work on but just haven’t seem to had the time lately, bring it on in. And yes, if you really don’t have anything to work on, you are more than welcome to just come hang out.

P.S. We may also have a few people give short presentations/demonstrations

As always, The Hack Factory doesn’t have a bar, so bring your own food & beer and remember, there are no maids on the Hack Factory payroll, so you need to clean up after yourself.

Agenda:

6:00PM-??? – Project/Show & Tell

See you Thursday!

-DC612

Hack Factory is located in the Seward neighborhood. Enter via the yellow side door.

3119 East 26th ST

Minneapolis, MN 55418.

http://dc612.org

http://twitter.com/dc612

http://groups.google.com/group/dc612

June 14th Meeting 7pm @ Elsies

jaredbird — Tue, 05 Jun 2012 20:25:44 +0000

Please note that we are not starting until 7PM as someone else is using the banquet room until that time.

This month Spenser Reinhardt will be presenting on basic stack overflow examples. Examples can be participated in by everyone during the presentation, through a virtual machine downloaded from the link at the bottom. While technically valid exploits, present mitigation techniques such as DEP and ASLR will be turned off, and likely would prevent most if not all of these attacks.

****Note: To participate, you must download and bring the virtual machine with you: Protostar VM Download: http://download.exploit-exercises.com/exploit-exercises-protostar.ova

The vm is downloaded as a OVA file, which is a combination of virtual machine files into a tar. Both Virtualbox and VMware should have little to no issues running this file, although some converting may be needed. Please email the list or join mplsctfgames irc if you have any issues, and preferably be ready prior to the presentation.

Agenda:

7:00PM-7:30PM – Get in, get drinks and food ordered

7:30PM-???? – Spenser Reinhardt

See you Thursday!

-DC612

http://dc612.org

http://twitter.com/dc612

http://groups.google.com/group/dc612

No May Meeting

jaredbird — Mon, 07 May 2012 16:25:45 +0000

Go enjoy siracon & secure360 this week. We will have the regularly scheduled meeting again in June. We will not be meeting this Thursday.

April 12 meeting location change

jaredbird — Fri, 06 Apr 2012 16:44:59 +0000

We are going to have the April 12th DC612 meeting inside the banquet room at Elsie’s Bar and Bowling Alley in NE Minneapolis on Thursday, April 12th. This is a change from the original post stating the meeting was going to be at the hack factory.

April 12th meeting 6pm @ Elsie’s

jaredbird — Thu, 29 Mar 2012 23:25:03 +0000

This month Josh More will be doing a test run of his Secure360 talk titled “Lean Security 101: A Practical Approach to Security Projects”.

The meeting will be held inside the banquet room at Elsie’s Bar and Bowling Alley in NE Minneapolis on Thursday, April 12th.

Agenda:

6:00PM-??? – Josh More

See you Thursday!

-DC612

http://dc612.org

http://twitter.com/dc612

http://groups.google.com/group/dc612

March 8th meeting 6pm @ Hack Factory

jaredbird — Sat, 03 Mar 2012 02:14:18 +0000

This month we are going to do having a project/show and tell meeting. This is a great opportunity to work on that project that you really want to work on, but just havent had the time for (like the balloon/camera contraption that we are going to send to space this spring). So if you are like me and have some sort of project to work on but just haven’t seem to had the time lately, bring it on in. And yes, if you really don’t have anything to work on, you are more than welcome to just come hang out.

As always, The Hack Factory doesn’t have a bar, so bring your own food & beer and remember, there are no maids on the Hack Factory payroll, so you need to clean up after yourself.

Agenda:

6:00PM-??? – Project/Show & Tell

See you Thursday!

-DC612

Hack Factory is located in the Seward neighborhood. Enter via the yellow side door.

3119 East 26th ST

Minneapolis, MN 55418.

http://dc612.org

http://twitter.com/dc612

http://groups.google.com/group/dc612

Feb 9th Meeting 6pm @ Elsies

jaredbird — Mon, 06 Feb 2012 15:18:55 +0000

The February DC612 meeting will be held inside the banquet room at Elsie’s Bar and Bowling Alley in NE Minneapolis on Thursday, February 9th. This month Donald Schleede is going to be doing a test run of the talk he has submitted for Secure 360 titled “Device Security”. Below is the abstract of his talk:

It is forecasted within the next five (5) years that the Internet will not only be a worldwide connection of computers, but a interconnection of everyday devices that we use. These devices will include your coffee maker, your thermostat, your bathroom scale, your pill bottles, and other common devices within your home, car, and work environments. These devices will have access to critical personal information as well as the ability to control the environment around us. With the future explosion of these devices connected to the Internet, how will we secure the devices and protect our information? In this presentation, I will describe the main security concerns of devices from current device customers, including the current guidance on how to secure devices in different vertical markets that need to meet either PCI, HIPPA, or NERC/CIP requirements. We will also discuss some current and proposed architectural designs for device security, and the challenges we face with these designs.
Agenda:

6:00PM-6:30PM – Order food and drinks

6:30PM-???? – Donald Schleede

See you Thursday!

Thanks!

-DC612

January 12th 6:30 @ The Hack Factory – WPA Pin Hacking

videoman — Wed, 04 Jan 2012 16:59:16 +0000

Happy new year!

Did anyone get that certain someone a new router or WiFi access point this holiday season? Chances are that we can break into it if it has the WPA Pin mode. We are gonna do this DC612 more workshop style. So what we need from you is 1) Laptop with WiFi (backtrack or linux), 2) Wireless Access Point with “PIN” mode, and a WPA passphrase. We will work on cracking this until everyone breaks the network keys. We will also talk about why this is such as bad thing, and how this is yet another flaw that was introduced into WiFi networking.

Location: The Hack Factory (The wonderful local Hacker Space – memberships available!)
The Hack Factory doesn’t have a bar, so bring your own food & beer and remember, there are no maids on the Hack Factory payroll, so you need to clean up after yourself.

Agenda:

6:30PM-7PM – Meet & Greet
7PM-??? – Setup laptops, Boot flawed WiFis, Profit!

See you Thursday!

-DC612

Hack Factory is located in the Seward neighborhood. Enter via the front door, and head to the class room.
3119 East 26th ST
Minneapolis, MN 55406.
http://dc612.org
http://twitter.com/dc612
http://groups.google.com/group/dc612

Dec 8th Meeting 6:30pm @ Hack Factory

jaredbird — Tue, 06 Dec 2011 20:14:12 +0000

This month we are going to be doing a 2011 Review of Exploits Discussion. This will be a discussion based meeting covering some of the well publicized exploits for the last year. We will discuss how they worked, why they worked, etc. If you think you have pretty good insight about one of the exploits from this year, please come and share. As always these meetings are free and open to anyone.

The Hack Factory doesn’t have a bar, so bring your own food & beer and remember, there are no maids on the Hack Factory payroll, so you need to clean up after yourself.

Agenda:

6:30PM-7PM – Meet & Greet

7PM-??? – Exploit year in review discussions

See you Thursday!

-DC612

Hack Factory is located in the Seward neighborhood. Enter via the yellow side door.

3119 East 26th ST

Minneapolis, MN 55418.

http://dc612.org

http://twitter.com/dc612

http://groups.google.com/group/dc612

November 10th meeting – Elsie’s Bar

videoman — Tue, 08 Nov 2011 01:36:45 +0000

This month we will dicuss the new IP lab, and play with Artimage, a java GUI which seems to be gaining popularity with metasploit.

The classroom at the Hack Factory this month has an Arduino class, so we will be meeting at Elsie’s.

Elsie’s Restaurant Bar and Bowling
729 MarshallStreet N.E.,
Minneapolis, MN 55413

6pm doors open, 7:30 topic start.

@_videoman_ is returning from a business trip, and will be a few minutes late.

October 13th Meeting 6:30pm @ Hack Factory

jaredbird — Fri, 07 Oct 2011 01:02:09 +0000

This month we have a special guest , well virtual guest, but we are none the less exited! Schuyler Towne will be webex-ing in to give us a talk on lockpicking and whatever else it is he decides to talk about. There is a lock board to practice on at the Hack Factory, so bring your picks!

As always, The Hack Factory doesn’t have a bar, so bring your own food & beer and remember, there are no maids on the Hack Factory payroll, so you need to clean up after yourself.

Agenda:

6:30PM-7PM – Socialize while Jared attempts to get webex working

7PM-??? – Schuyler Towne

See you Thursday!

-DC612

Hack Factory is located in the Seward neighborhood. Enter via the yellow side door.

3119 East 26th ST

Minneapolis, MN 55418.

http://dc612.org

http://twitter.com/dc612

http://groups.google.com/group/dc612