SANS SEC530 Demonstrations

530.1

• Blue/Red asymmetries

  • Fail2Ban

• Rogue Pi

  • Rogue Pi

530.2

• DO NOT use Type 7 passwords. Here's why...

  • 7crack.py

• Get the latest BOGONs

  • Get-Bogons.ps1

530.3

• Scripting VirusTotal submissions

  • vt-upload.py

• HSTS to prevent users from clicking through warnings

  • HSTS Preload

530.4

• Dangers of SETUID programs

  • SETUID

530.5

• Finding obfuscated PowerShell in event logs

  • malicious-pwsh

• Collecting username and password intel

  • OpenCanary