#CPMX3

What is Campus Party Mexico 2011?

http://es.wikipedia.org/wiki/Campus_Party

CPMX3: The Security Conferences

Alo intruders, much time on the job and private projects that sometimes cant post like more news around my researches.. but I had a little time to stay on this edition of Campus Party Mexico, i saw many people that loved the technology like me, i remember the first edition of Campus Party i was part of that first edition with special invitation (nostalgy), the camping and infraestructure really r0x obviously the old friends (long time ago).

Talking about the conferences very well just i stayed one day XD, would be more interesting in the future dotdotpwn nitr0us's tool with the mathematical solutions (talking behind scene with him) but really really r0x i found many bugs with this tool :X ... another tool interesting is routerpwn a portal with the most popular bugs on routers other friend behind this tool is hkm

(i cant see ur presentation dude sorry!)

CPMX3: The Wargames

I had a little time to see the wargames nothing unusual with stage I,II but don't understood why the sponsor was SCT if the web portal is vulnerable XD other wargame more interesting was telefonica don't had much time to check the clues (the vpn connection s0x) and finally leave...

Well I'll be dusting laboratory and pick up some things for the hack scene...

some friends and me on #CPMX3:

@_alt3kx_

@nitr0usmx (IT Security Researcher MX)

@_hkm (IT security Researcher MX)

@paulinocaIderon (Developer Nmap MX)

@preth00nker (Developer and Researcher MX)

/alt3kx.

Los Hackers con Ideologia

[snip spanish]

La paradoja de la Seguridad

Leia una publicacion recientemente (-de pie en algun lugar de samborns domingo lluvioso-) sobre los "chicos malos", (narcotraficantes , carteles, distribuidores, etc) y por otro lado los "chicos buenos" (AFI, DEA, Ejercito etc) con un msg de nuestros gobernantes "Tenemos que erradicar la violencia y las drogas...blah blah" frunso el senio y digo -estoy deacuerdo-, Pero si NO hay drogas en el mundo, gran parte de la Economia mundial caeria, los "chicos malos" no tendrian plata para alimentos y las organizaciones como AFI, DEA etc no tendrian razon de existir, paginas mas adelante observo los "triunfos" de las organizaciones y la necesidad de publicidad, el mejor pretexto de los gobiernos para pedir y derochar el dinero...

Luego abro mi portatil (-sentado en algun lugar de starbucks, domingo lluvioso, con gente tonta a mi alrededor, escuchando las frivolidades mas estupidas de un Mexicano con Mercedez Benz repitiendo la palabra "Osea...") y leo... "Arrestan hackers en Spain, cupula de Anonymous...etc", sigo clickeando, leyendo los feeds importantes, observo servicios de empresas consultoras de seguridad informatica, conferencias, antvirus etc, ahora -pienso yo- que rara vez se detiene a uno de los mejores hackers por dos razones; una no existe la intension y si asi pasara lo mejor seria contratarle y dos; la mayoria de las unidades de delitos informaticos no tienen los conocimientos y experiencia suficientes para una investigacion (experiencia propia) , las empresas y consultoras hoy en dia su marketing es "Cuidese de los Hackers y Virus...".

La paradoja se basa, en la suposicion de que la amenaza es permanente, el uso inapropiado de la tecnologia y la necesidad de contrarestarla.

En conclusion, el mundo de la seguridad necesita una razon de ser para justificar su negocio, esta razon es la presencia de hackers y/o amenazas (noticias, medios etc), la constante necesidad mundial de una escena de piratas informaticos y en terminos mas generales la presencia del UnderGround.

No es necesario que ellos existan..., nosotros existimos por que nos gusta aprender, pero ellos nos dan una buena razon de ser; asi que estamos "obligados" a permanecer y existir por el buen camino, debemos estar bien organizados, con ese espiritu que refleja nuestra filosofia y donde desgraciadamente ese espiritu que antes nos caracterizaba... se ha ido en el tiempo alt3kx

[/snip spanish]

Link de entrevista revista diasiete: Los Hackers con Ideologia 030611

http://www.diasiete.com/xml/pdf/565/13HACKERS.pdf

/alt3kx.

Next Generation Firewall (NGF), Bypass...?

Well , some months ago i had the mission to probing the all firewalls called NGF (Next Generation Firewall), really good when i hear the first place Check Point by NSS Labs, (currently i working and playing with these) everything works perfectly (I loved CP..)... blocking the commons socials apps as MSN, facebook, Twitter. BTW, but what happen using HTTPS..? wrong... is possible to obfuscation the code across traffic web (POST, GET)? How?, for example facebook using HTTPS, i can't block on my firewall XDD... yep the tunnel SSL r0x...

AppWiki:

http://appwiki.checkpoint.com/appwikisdb/public.htm

PoCs on:

t0 be continued...

/alt3kx.

Full Disclosure Vulnerabilities (Slides & Videos BugCon'09)

Too much time intruders, don´t understand why not published (Armin friend) the slides over the BugCon's page well, tonite i was reading the very old mails... sorry friends, i posted the slides and videos that I gave on BugCon Security Conference 2009, Mexico City, greetings to original staff BugCon www.bugcon.org

Slides BugCon Security Conferences '09 Mexico City

(Alex Hernandez aka alt3kx)

Aruba Networks's Video Bugs PoCs (Acces Point)

[Thanks Oscar Scitum´s Company & Tiger Team Mexico]

TriBox VoIP´s videos Bugs PoCs (PBX Asterisk)

[Thanks Matias Axtel´s Company, Telecomunications Team Mexico]

CISCO Bugs´s video Bugs PoCs (Cisco VPN Client)

[Thanks CISCO´s Company, PSIRT Team, Omar Santos & Tiger Team]

More info: CISCO Security Activity Bulletin

http://tools.cisco.com/security/center/viewAlert.x?alertId=19445

Puplic Exploit:

http://www.exploit-db.com/exploits/10190/

/alt3kx.

RSA SecurID Under Attack

Yep, the past week I've the bad/good news directly on my inbox from RSA, just for a customers, the notice was about the new attack (two-multifactor) for SecurID, very interesting, but at the moment don't have technical details, any PoC? well i am working how to reproduce the attack, maybe thing very dificult or not... XDD

/alt3kx.

Retaked Robotics projects...

Robotic arm, controled with Motorola HC11 microcontroller, 1st place winner robotics projects ITESM-CEM Mexico (year 2000), 1st place winner robotics proyects UVM-CEM Mexico (year 2000), 1st Place winner in IPN robotics projects (2000) Mexico, 2nd place "Walking Machine" in Canada 2001, now I am taking the iron again: D , reviving old projects... just nostalgic ( a universitary guy) with my dear friend "El Rojo"...picture taked on my home (wonderfull place to do research) sometimes the job s0x 2011 XD

My Birthday....

Today is my Birthday 04/01/11 .... I'm alone :(, just talking with Erika Cantu (MafiaMoros)

Happy New Year 2011

Well just saying happy new hack year!! 2011, to much job for this year! , new projects, more bugs to vendors XD more research...