BYO Disaster
Djwishbone and PuNk1nPo0p explores byo disaster at DEF CON 21, examining digital-forensics and practical defenses.
Summary
Architecture and Background
BYO-Disaster and Why Corporate Wireless Security Still Sucks JAMES SNODGRASS (PUNK1NPO0P) HILLBILLY HACKER JOSH HOOVER (WISHBONE) HILLBILLY HACKER Right when you thought this topic had been beaten to death, something new emerges. This horse isn't dead yet! This talk will focus on a completely new vulnerability in the way some devices handle MsChapV2 and present some newer methods for capturing clear text credentials easily and without heavy processing power.
Vulnerability Analysis
We will walk you through a full attack against WPA2 enterprise networks using a special patched version of radius that makes this all possible. But wait, there's more! Act now, by coming to the talk, and you'll receive access to new automation tools to do a lot of the work for you.
Exploitation and Demonstrations
If you're lazy like us and would like access to credentials without a math degree this talk is for you! James Snodgrass enjoys pumping iron and flattening hats. His greatest aspiration in life is leveling his Ford truck and finding that next tight t-shirt.
Remediation and Defensive Strategies
Josh Hoover (@wishbone1138) has spent over a decade in computer security, focused on digital forensics and penetration testing. He has been attending DEF CON for 14 years but this is the first time he has ever spoken at one. Materials:
Related talks
Main Stage·22 min
Dead Addict · Gail Thackeray
Dead Addict and Gail Thackeray explores before, during, and after at DEF CON 20, examining digital-forensics and practical defenses.
Main Stage·49 min
Michael Perklin
Michael Perklin explores anti-forensics and anti-anti-forensics at DEF CON 20, examining digital-forensics and practical defenses.
Main Stage·48 min
Tim Maletic · Christopher Pogue
Tim Maletic and Christopher Pogue explores opfor 4ever at DEF CON 20, examining digital-forensics and practical defenses.