gitDigger Creating Useful Wordlists
Jaime Filson and Rob Fuller explores gitdigger creating useful wordlists at DEF CON 21, examining red-teaming and practical defenses.
Summary
Architecture and Background
gitDigger: Creating useful wordlists from public GitHub repositories JAIME FILSON (WIK) ROB FULLER (MUBIX) This presentation intends to cover the thought process and logistics behind building a better wordlist using github public repositories as its source. With an estimated 2,000,000 github projects to date, how would one store that amount of data?
Vulnerability Analysis
Would you even want or need to? After downloading approximately 500,000 repositories, storing 6TB on multiple usb drives; this will be a story of one computer, bandwidth, basic python and how a small idea quickly got out of hand.
Exploitation and Demonstrations
Jaime Filson (WiK) ell, WiK's just zis guy. He enjoys long walks on the beach while his computer equipment is busy fuzzing software, cracking passwords, or spidering the internet.
Remediation and Defensive Strategies
Rob Fuller (Mubix) is a Senior Red Teamer. His professional experience start from his time on active duty as United States Marine. He has worked with devices and software that run gambit in the security realm. He has a few certifications that haven't expired yet, but the titles that he holds above the rest is father, husband, and United States Marine. Materials:
Related talks
Main Stage·53 min
Anch
Anch details the Monkey in the Middle: A pentesters guide to playing in traffic.
Main Stage·47 min
Keren Elazari
Keren Elazari details empowering Hackers to Create a Positive Impact Keren Elazari In March 2014 I spoke at the annual TED conference about why hackers are a vital part of the information age.
Main Stage·47 min
Jake Kouns · Carsten Eiram
Jake Kouns and Carsten Eiram details screw Becoming A Pentester - When I Grow Up I Want To Be A Bug Bounty Hunter.