48
1 dradis Framework dradis Framework sharing information will get you root http://dradisframework.org/ Daniel Martín Gómez [email protected] august 2009

Defcon17 - dradis Framework: sharing information will get you root

  • Upload
    etd

  • View
    4.175

  • Download
    0

Embed Size (px)

DESCRIPTION

 

Citation preview

Page 1: Defcon17 - dradis Framework: sharing information will get you root

1

dradis Framework

dradis Framework sharing information will get you root

http://dradisframework.org/

Daniel Martín Gó[email protected] 2009

Page 2: Defcon17 - dradis Framework: sharing information will get you root

2

dradis Framework

dradis Framework sharing information will get you root

Daniel Martín Gó[email protected] 2009

http://dradisframework.org/

Page 3: Defcon17 - dradis Framework: sharing information will get you root

Agenda

➔ In the begining, there was nothing

➔ The dradis project

➔ The Framework

➔ Demo

Page 4: Defcon17 - dradis Framework: sharing information will get you root

4

dradis Framework

In the begining, there was nothing

Page 5: Defcon17 - dradis Framework: sharing information will get you root

5

In the begining, there was nothing

Information Discovery

✔ port scan✔ vuln. scan✔ web app scan✔ ...

Page 6: Defcon17 - dradis Framework: sharing information will get you root

6

In the begining, there was nothing

Information Discovery

✔ port scan✔ vuln. scan✔ web app scan✔ ...

Exploiting✔ metasploit✔ milw0rm✔ ...

Page 7: Defcon17 - dradis Framework: sharing information will get you root

7

In the begining, there was nothing

Information Discovery

✔ port scan✔ vuln. scan✔ web app scan✔ ...

Exploiting✔ metasploit✔ milw0rm✔ ...

✔ word✔ pdf tools✔ ...

Reporting

Page 8: Defcon17 - dradis Framework: sharing information will get you root

8

In the begining, there was nothing

Information Discovery

Exploiting

Reporting

What aboutsharing the

information?

Page 9: Defcon17 - dradis Framework: sharing information will get you root

9

In the begigin, there was nothing

Why do we need THAT?

Page 10: Defcon17 - dradis Framework: sharing information will get you root

10

why do we need it?

Page 11: Defcon17 - dradis Framework: sharing information will get you root

11

why do we need it?

Page 12: Defcon17 - dradis Framework: sharing information will get you root

12

why do we need it?

Scheduling Madness

Page 13: Defcon17 - dradis Framework: sharing information will get you root

Agenda

➔ In the begining, there was nothing

➔ The dradis project

Page 14: Defcon17 - dradis Framework: sharing information will get you root

14

dradis Framework

The dradis project

➔ Project goals

➔ Technology behind the scenes

➔ Evolution

➔ Why dradis?

Page 15: Defcon17 - dradis Framework: sharing information will get you root

15

The dradis project

Project goals

Page 16: Defcon17 - dradis Framework: sharing information will get you root

16

The dradis project

4 goals for the project

➔ share information effectively

Page 17: Defcon17 - dradis Framework: sharing information will get you root

17

The dradis project

4 goals for the project

➔ share information effectively

➔ easy to use and adopt

Page 18: Defcon17 - dradis Framework: sharing information will get you root

18

The dradis project

4 goals for the project

➔ share information effectively

➔ easy to use and adopt

➔ flexibility

Page 19: Defcon17 - dradis Framework: sharing information will get you root

19

The dradis project

4 goals for the project

➔ share information effectively

➔ easy to use and adopt

➔ flexibility

➔ small and portable

Page 20: Defcon17 - dradis Framework: sharing information will get you root

20

dradis Framework

The dradis project

➔ Project goals

➔ Technology behind the scenes

Page 21: Defcon17 - dradis Framework: sharing information will get you root

21

dradis Framework

Technology behind the scenes

Page 22: Defcon17 - dradis Framework: sharing information will get you root

22

Technology behind the scenes

Database

REST

Web

Page 23: Defcon17 - dradis Framework: sharing information will get you root

23

dradis Framework

The dradis project

➔ Project goals

➔ Technology behind the scenes

➔ Evolution

Page 24: Defcon17 - dradis Framework: sharing information will get you root

24

The dradis project

Evolution

2007 - ...

Page 25: Defcon17 - dradis Framework: sharing information will get you root

25

The Framework

Activity

Page 26: Defcon17 - dradis Framework: sharing information will get you root

26

The Framework

Downloads

Page 27: Defcon17 - dradis Framework: sharing information will get you root

27

The dradis project

Why DRADIS?

<

Page 28: Defcon17 - dradis Framework: sharing information will get you root

Agenda

➔ In the begining, there was nothing

➔ The dradis project

➔ The Framework

Page 29: Defcon17 - dradis Framework: sharing information will get you root

29

dradis Framework

The Framework

➔ Impossible is nothing

➔ dradis Plugins

➔ The Meta Server

Page 30: Defcon17 - dradis Framework: sharing information will get you root

30

The dradis project

Impossible is nothing

Page 31: Defcon17 - dradis Framework: sharing information will get you root

31

Impossible is Nothing

DRADIS

Page 32: Defcon17 - dradis Framework: sharing information will get you root

32

Impossible is Nothing

DRADIS

Page 33: Defcon17 - dradis Framework: sharing information will get you root

33

Impossible is Nothing

DRADIS

Vuln. DB

Page 34: Defcon17 - dradis Framework: sharing information will get you root

34

Impossible is Nothing

DRADIS

Vuln. DB

Page 35: Defcon17 - dradis Framework: sharing information will get you root

35

dradis Framework

The Framework

➔ Impossible is nothing

➔ dradis Plugins

Page 36: Defcon17 - dradis Framework: sharing information will get you root

36

The dradis project

dradis Plugins

Page 37: Defcon17 - dradis Framework: sharing information will get you root

37

dradis Plugins

module Plugins module Upload include NmapUpload endend

Convention over configuration

Page 38: Defcon17 - dradis Framework: sharing information will get you root

38

dradis Plugins

module Plugins module Upload include NmapUpload endend

Convention over configuration

./script/generate upload_plugin nessus

Page 39: Defcon17 - dradis Framework: sharing information will get you root

39

dradis Framework

The Framework

➔ Impossible is nothing

➔ dradis Plugins

➔ The Meta Server

Page 40: Defcon17 - dradis Framework: sharing information will get you root

40

The dradis project

The Meta Server

The dradis Meta Server will be cooler than giant robots smashing into other giant robots!

”dradis-develmailing list : 2009-06-29

Page 41: Defcon17 - dradis Framework: sharing information will get you root

41

The Meta-Server

Page 42: Defcon17 - dradis Framework: sharing information will get you root

42

The Meta-Server

Page 43: Defcon17 - dradis Framework: sharing information will get you root

43

The Meta-Server

Archive

Page 44: Defcon17 - dradis Framework: sharing information will get you root

44

The Meta-Server

Archive Backup

Page 45: Defcon17 - dradis Framework: sharing information will get you root

45

The Meta-Server

Archive

Intelligence ( Stats? )

Backup

Page 46: Defcon17 - dradis Framework: sharing information will get you root

Agenda

➔ In the begining, there was nothing

➔ The dradis project

➔ The Framework

➔ Demo

Page 47: Defcon17 - dradis Framework: sharing information will get you root

47

dradis Framework

Thanks.

Page 48: Defcon17 - dradis Framework: sharing information will get you root

48

dradis Framework

dradis Framework

Daniel Martín Gó[email protected]

http://dradisframework.org/

irc.freenode.org

#dradis