Tuesday, December 4, 2012

CSO Forum, Mexico 2012

Dear CISOs / CSOs 

Well, after a few months of being absent, the beautiful girl Lizzette Mexico Computer World Editor (who I finally met in person and now contributor of ASIMX (Asociacion de Seguridad Informatica Mexicana) the level of professionalism and expertise to CISOs (Chief Information Security Officer) throughout Mexico, I have been invited to give a private new briefing (just invitation) with a corporate approach, similar to that of my organization, this time with the topic "Behind enemy lines, BYOD (Bring Your Own Device)", the new phenomenon that all CISOs must face a reality that indicates that users penetrated the frontiers of the organization with your smartphone or tablet, want It or not our organization... 

Topic: CSO Forum, Mexico 2012, Protega su informacion, donde sea, como sea
Conference: Tras las Lineas Enemigas [BYOD]
Venue: Hotel Marriott Reforma. Mexico. DF. 041212




Slides CSO Forum, Security Conferences '12 Mexico City
(Alex Hernandez aka alt3kx)



/alt3kx.


Thursday, October 18, 2012

b:secure Conferences [TRIATHLON]


Dear Friends

In the last phase of the year 2012, i received the invtacion of people of b: secure to participate in the third phase of TRIATHLON, this last phase of conference management b: secure interested me, so i accepted the invitation to represent a small Retrospective of the Hacker scene "Underground" of Mexico, it comes to creating and sharing with the audience a journey to the past, present and future of hacker undeground scene of Mexico, with all its magic, its legends, its victories and especially its darkest days...


Topic: Delitos Informaticos y Forensia Digitial
Conference: Retrospectiva: Escena Hacker undeground de Mexico
Venue: Hotel Marriott Reforma. Mexico. DF. 181012

Source: http://www.bsecureconference.com.mx/2012/index.htm
Video: http://www.youtube.com/watch?v=7MNRycrcTZg



Slides b:secure [TRIATHLON] Security Conferences '12 Mexico City
(Alex Hernandez aka alt3kx)



Images b:secure [TRIATHLON] Security Conferences '12 Mexico City
(Alex Hernandez aka alt3kx)







/alt3kx.


Saturday, February 4, 2012

#h00t3rsc0n [after party]

Alo intruders, once again this year ... much time on the job and private projects that sometimes cant post like more news around my researches... :( . but i took the time to live once again with the friends (The 0ld/new sch00l Mexican Hackers)... i lived with the special crazy girl and hax0r @Alination a very young girl and also very pretty (a professional gamer)...that's our influence over new generation will endure for ever and ever XD ...

#BugCon after party r0x..



Special Gr33ts & post-after (bunkent0r/my house)

@_alt3kx_
@nitr0usmx (IT Security Researcher MX)
@_hkm (IT Security Researcher MX)
@calderpwn (Developer Nmap MX)
@alination (Professional Gamer MX)
@b0rr3x (IT Security Researcher & Banking MX)
@chr1x (IT Security Researcher MX)
@bugcon (Security Conferences)
@pcoronaf (IT Auditor MX)
@dexosexo (IT Security Researcher MX)
@insegar (ESET's Latam Malware Laboratory AR)

/alt3kx.

Sunday, July 24, 2011

#CPMX3

What is Campus Party Mexico 2011?


CPMX3: The Security Conferences

Alo intruders, much time on the job and private projects that sometimes cant post like more news around my researches.. but I had a little time to stay on this edition of Campus Party Mexico, i saw many people that loved the technology like me, i remember the first edition of Campus Party i was part of that first edition with special invitation (nostalgy), the camping and infraestructure really r0x obviously the old friends (long time ago).

Talking about the conferences very well just i stayed one day XD, would be more interesting in the future dotdotpwn nitr0us's tool with the mathematical solutions (talking behind scene with him) but really really r0x i found many bugs with this tool :X ... another tool interesting is routerpwn a portal with the most popular bugs on routers other friend behind this tool is hkm
(i cant see ur presentation dude sorry!)

CPMX3: The Wargames

I had a little time to see the wargames nothing unusual with stage I,II but don't understood why the sponsor was SCT if the web portal is vulnerable XD other wargame more interesting was telefonica don't had much time to check the clues (the vpn connection s0x) and finally leave...

Well I'll be dusting laboratory and pick up some things for the hack scene...

some friends and me on #CPMX3:

@_alt3kx_
@nitr0usmx (IT Security Researcher MX)
@_hkm (IT security Researcher MX)
@paulinocaIderon (Developer Nmap MX)
@preth00nker (Developer and Researcher MX)

/alt3kx.


Monday, July 4, 2011

Los Hackers con Ideologia


[snip spanish]

La paradoja de la Seguridad

Leia una publicacion recientemente (-de pie en algun lugar de samborns domingo lluvioso-) sobre los "chicos malos", (narcotraficantes , carteles, distribuidores, etc) y por otro lado los "chicos buenos" (AFI, DEA, Ejercito etc) con un msg de nuestros gobernantes "Tenemos que erradicar la violencia y las drogas...blah blah" frunso el senio y digo -estoy deacuerdo-, Pero si NO hay drogas en el mundo, gran parte de la Economia mundial caeria, los "chicos malos" no tendrian plata para alimentos y las organizaciones como AFI, DEA etc no tendrian razon de existir, paginas mas adelante observo los "triunfos" de las organizaciones y la necesidad de publicidad, el mejor pretexto de los gobiernos para pedir y derochar el dinero...

Luego abro mi portatil (-sentado en algun lugar de starbucks, domingo lluvioso, con gente tonta a mi alrededor, escuchando las frivolidades mas estupidas de un Mexicano con Mercedez Benz repitiendo la palabra "Osea...") y leo... "Arrestan hackers en Spain, cupula de Anonymous...etc", sigo clickeando, leyendo los feeds importantes, observo servicios de empresas consultoras de seguridad informatica, conferencias, antvirus etc, ahora -pienso yo- que rara vez se detiene a uno de los mejores hackers por dos razones; una no existe la intension y si asi pasara lo mejor seria contratarle y dos; la mayoria de las unidades de delitos informaticos no tienen los conocimientos y experiencia suficientes para una investigacion (experiencia propia) , las empresas y consultoras hoy en dia su marketing es "Cuidese de los Hackers y Virus...".

La paradoja se basa, en la suposicion de que la amenaza es permanente, el uso inapropiado de la tecnologia y la necesidad de contrarestarla.

En conclusion, el mundo de la seguridad necesita una razon de ser para justificar su negocio, esta razon es la presencia de hackers y/o amenazas (noticias, medios etc), la constante necesidad mundial de una escena de piratas informaticos y en terminos mas generales la presencia del UnderGround.

No es necesario que ellos existan..., nosotros existimos por que nos gusta aprender, pero ellos nos dan una buena razon de ser; asi que estamos "obligados" a permanecer y existir por el buen camino, debemos estar bien organizados, con ese espiritu que refleja nuestra filosofia y donde desgraciadamente ese espiritu que antes nos caracterizaba... se ha ido en el tiempo alt3kx

[/snip spanish]

Link de entrevista revista diasiete: Los Hackers con Ideologia 030611

/alt3kx.


Tuesday, June 14, 2011

Next Generation Firewall (NGF), Bypass...?

Well , some months ago i had the mission to probing the all firewalls called NGF (Next Generation Firewall), really good when i hear the first place Check Point by NSS Labs, (currently i working and playing with these) everything works perfectly (I loved CP..)... blocking the commons socials apps as MSN, facebook, Twitter. BTW, but what happen using HTTPS..? wrong... is possible to obfuscation the code across traffic web (POST, GET)? How?, for example facebook using HTTPS, i can't block on my firewall XDD... yep the tunnel SSL r0x...

AppWiki:
t0 be continued...

/alt3kx.

Wednesday, June 1, 2011

Full Disclosure Vulnerabilities (Slides & Videos BugCon'09)

Too much time intruders, don´t understand why not published (Armin friend) the slides over the BugCon's page well, tonite i was reading the very old mails... sorry friends, i posted the slides and videos that I gave on BugCon Security Conference 2009, Mexico City, greetings to original staff BugCon www.bugcon.org


Slides BugCon Security Conferences '09 Mexico City
(Alex Hernandez aka alt3kx)


Aruba Networks's Video Bugs PoCs (Acces Point)
[Thanks Oscar Scitum´s Company & Tiger Team Mexico]


TriBox VoIP´s videos Bugs PoCs (PBX Asterisk)
[Thanks Matias Axtel´s Company, Telecomunications Team Mexico]


CISCO Bugs´s video Bugs PoCs (Cisco VPN Client)
[Thanks CISCO´s Company, PSIRT Team, Omar Santos & Tiger Team]


More info: CISCO Security Activity Bulletin

Puplic Exploit:

/alt3kx.