October’s meeting is still planned! Apologies for the late post. 😉
Place:
Cloudspace HQ
3403 Technological Ave Suite 2 Orlando, FL 32817
Time: 7pm
Topic: TBD I am waiting on emails from a few folks to finish the planning! It’s going to be a laid back meeting for the Halloween weekend!
Please RSVP on Meetup here: http://www.meetup.com/Orlando-Nerds-and-Geeks/calendar/14820575/
This month’s meeting was moved to October 1st to accommodate venue and scheduling needs. Note that we still need to confirm the venue, but we’re pretty sure we’ll be at Cloudspace.
Place:
Cloudspace HQ
3403 Technological Ave Suite 2 Orlando, FL 32817
Time: 7pm
Topic: TBD, but we are hard at work deciding what talks will happen. It should be an excellent meeting.
Be there or be square!
Please RSVP at the Meetup group: http://www.meetup.com/Orlando-Nerds-and-Geeks/calendar/14815423/
The normal venue for DC407 has changed. We have gotten into a very nice office space. I haven’t seen pictures, but I’m told it’s nice.
When: 7pm Friday, August 27th
Where: 3403 Technological Avenue, Orlando, FL Suite #2 (with the big swooshie CloudSpace logo)
We’re having our post-con recap and planning meeting. Undoubtedly much fun to be had, and great folks to discuss related subject matter with. Also, three of our regular attendees are celebrating their dates of birth.
When: 7pm Friday, August 27th
Where: Familab (Unit 108)
Feel free to call my Google Voice at 407-536-8705 if you have trouble getting in the gate.
If you want to RSVP, there is a MeetUp event for this particular meeting posted at: http://www.meetup.com/Orlando-Nerds-and-Geeks/calendar/14350486/
DC407 is on for this Friday. We have two copies of the new Metasploitable VM running on the server. Come out and own some boxes. Be sure to install Metasploit and update your plugins.
When: 7pm Friday, May 28th
Where: Familab (Unit 108)
How: Local LAN or Wifi w/ MSFFeel free to call my Google Voice at 407-536-8705 if you have trouble getting in the gate.
It’s that time again. DC407 will be meeting out at FAMiLab this
Friday, April 30th at 7pm.
There isn’t a set agenda this month, but a few of us plan to work on
the VM farm and/or do lightning talks. If you have a security hack you
want to demo feel free to bring it out and show the group.
As for future meetings, we do need to discuss possible topics and
speakers. If you’d like to give a talk at one of the monthly meetings,
or have a specific subject you’d like to hear about, let one of us know.
Also, Defcon 18 is quickly approaching. G3k and a few of us are
planning on participating in OpenCTF. If you’re interested in CTF, or
want to get up to speed, be sure to bug him.
See you there!
Sorry for taking so long to get this posted on here.
As I’ve promised since the last meeting, I’m going to give a demo/talk about Metasploit. I’m not a pro, but I feel comfortable enough to work in the shell.
A lot of people keep asking me “why an exploit platform? Why not just exploit things?” One thing I learned from the forensics work I did for the sheriff’s office is that you need to have something that you can legitimately show your work. If you want to be a legitimate penetration tester and get clients and do work, you’ll need to be able to go back and say “Ok, this is what I did, and this is how it happened” in order to provide the customer with real value and understanding. Metasploit isn’t commercial software, but it will get you used to a certain work flow. So this is why I Metasploit.
What is Metasploit? Metasploit is a exploitation framework. It comes with pre-canned exploits, and an awesome environment in which you can write your own exploits and modules. While I’m not to the point where I’m discovering my own 0days and knowing how to exploit them, it’s there and something to look at. You can download Metasploit for free from: http://metasploit.com If you want to read up on how things work in MSF, a good course from the AMAZING folks over at Offensive Security (the guys that made Backtrack) is: http://www.offensive-security.com/metasploit-unleashed/ I highly recommend it.
As for the demo, if you would like to participate, I am bringing a VMWare server with a bunch of Windows XP installs so that the group can mess with MSF and vulnerable boxes. What I recommend you bring is a laptop with Backtrack 4 installed and updated. If you don’t have a full install of BT4, you can do a persistent install on a USB key. The USB key will get you more mileage than a livecd in my opinion. You can find Backtrack 4 at: http://backtrack-linux.org That’s it so far. If you have any questions, you can email me at g3k@disillusion.us, or you can reply here. I’ll be posting my slides (if any) after the demo.
Let’s get a meeting together for February 2010. Feel free to suggest venues, dates and times. If you’re in the Orlando area and even remotely interested, drop me a PM or post here.
I’ve gone ahead and emailed the dcgroups admins to get our group reactivated, and begun work on the DC407 site. I have email and calendars set up and I’m working on getting the actual site set up. If you’d like a DC407 email/apps account just let me know. We have 50 to hand out with the free version of Google Apps.
I’ll start PMing, emailing and otherwise bothering the people I know here in town who might be interested. DC407 has been inactive since 2006, let’s make sure that changes in 2010.
As far as time and place, I’m near downtown Orlando so Stardust, Red Light Red Light, as well as Blue Jacket Park would be close by. For times, I’m a working stiff, so it’d have to be after 5:30pm on weekdays, but my Saturdays are pretty open. I’d like to avoid conflicts with the other user groups (i.e. 2600, OPUG, ORUG, CocoaHeads, etc.) if possible.
Welcome to WordPress.com. This is your first post. Edit or delete it and start blogging!