meetings

where & when

where: denhac, 700 Kalamath Street, Denver, CO 80204
when: typically 4th fridays (alternative dates can be arranged for speakers), 7-9 pm
discord: join the community on discord — decode: ZGlzY28gcmQge2RvdH0gZ2d7c2xhc2h9Q2FKV2pVZ3FFVg==
topics: we encourage members to be active and contribute to the group. if you have a meeting topic or idea, propose it in the discord channel or contact us directly.

past meetings

2018-12-14 Xync => Automated pentest lab deployment

2018-10-26 A new tool/technique: SILENTTRINITY

A new tool/technique called SILENTTRINITY was released at Derbycon earlier this month. The tagline is “A post-exploitation agent powered by Python, IronPython, C#/.NET.” This looks like something fun to experiment with. Bring a Windows target VM and something to run the C2 server that can do Python 3.7. You will probably also need a development environment setup (see following links). Github repo. Dev enviornment setup. The Derbycon presentation (53 minutes).

2018-09-28 administrativia

2017-10-27 DanderSpritz: How the Equation Group's 2013 tools pwn in 2017

presenter: Francisco Donoso

2017-08-25 wireless: the uncommon tasks

presenter: tilver

Some attack stuff as well as how to do useful things using Linux and a wireless adapter. Needed: Linux (Preferably Ubuntu, but will help with other distros), aircrack, wireshark, a wireless adapter that is Linux compatible.

2017-06-16 moose => Defcon CTF challenge walkthrough of awsno

2017-04-21 Tips, tricks, and preparation for CTF (Capture The Flag) events, with realtime PPP CTF play

2016-12-16 exploit paths for three CVEs from 2016

presenter: Xync

Xync will be presenting a walk through of the exploit paths for three CVE from this year. We’ll look at the iOS 9.3.4 jailbreak (Trident/Pegasus), DirtyCow, and RowHammer.