Fast-Track is a widely popular open source arsenal of custom coded tools that is included in the Back|Track 3 distribution. Fast-Track combines multiple old, new, and complex attacks in a framework that can easily be used by penetration testers to test the overall security of their network. Fast-Track incorporates new methods never before seen in delivering payloads, including bypassing the 64kb payload restrictions in windows debug. The presenter will discuss these attacks in details, how a penetration tester can use it in their own environment. What would a con be without popping multiple boxes and getting shells, shells, and more shells? In addition to this presenter, the author will be releasing a new version never before released until the presentation.
David Kennedy, CISSP, GSEC, MCSE 2003, is a principal and practice lead for the profiling group at SecureState. Prior to SecureState, David worked for the National Security Agency (N.S.A.) and has worked with some of the nations most elite security groups. David is the author of Fast-Track, an open-source penetration testing suite available in Linux. David has previously presented at Defcon and is a contributor to the Back|Track distributions.
Visit securestate.com to download Fast-Track or visit thepentest.com for movies, tutorials, wiki bugtracker, and the subversion repository.
Visit mediaarchives.com/ and ask for Ted to get copies of this presentation and a ton more at Shmoocon.