Thursday, July 15, 2010

Open Source Intelligence Gathering for Pentesting

For the pleasure of Argentinian women, and the joy of all the geeks, the charismatic presence of Chema Alonso will join us again this year offering one of the most interesting training of ekoparty!!

Check here for more information.

Open Source Intelligence Gathering for Pentesting

Before a penetration test, the collection of prior information could establish the difference between success and failure. This training is a training that grab the available information sources and information can be inferred through them, besides all the security breaches caused by members of the company. At the end of training students will be able to prepare an intelligence report about an organization to start building a pentesting plan

- Open Intelligence Gathering
o Goals
o Resources
o Phases
- Footprinting
o Public Data Infrastructure Gathering
* Organization Identification
* Internet Presence: InterNIC, Whois, DNS, etc..
* Service Providers
* State Records
* Published Services
o People Public Data Gathering
* People Identification
* Social tracing
* Maltego
- Fingerpinting
o Service Figerprinting
o OS fingerprinting
o Google/Bing/DNS fingerprinting
o Thrashing services
o Metadata fingerprinting
* Document exploration
* Document recognition
o Network mapping with FOCA
* Hand tunning
- Protection against data leaks
o DLP Techniques


All the submitters will receive a version of FOCA Pro.

TRAINER: Chema Alonso

Chema Alonso is Computer Engineering from the Universidad Rey Juan Carlos of Madrid where he is finishing his doctoral thesis on Web application security. He has been awarded the title of Most Valuable Professional by Microsoft in the area of computer security since 2004, a distinction that today, only three people have in Spain. It is usual writer on computer security technology magazines and speaker at national conferences such as the Microsoft Security Tour, Masters, or Technet Security Day @ Secure IT also participated in international conferences such as Blackhat, Defcon, ToorCon or ShmooCon among others. He works as a security consultant in computer 64 and writes a blog on computer security entitled "Un informático del lado del mal."


  1. commission express reviews I really like and appreciate your blog post.Much thanks again. Want more.

    1. The effectiveness of IEEE Project Domains depends very much on the situation in which they are applied. In order to further improve IEEE Final Year Project Domains practices we need to explicitly describe and utilise our knowledge about software domains of software engineering Final Year Project Domains for CSE technologies. This paper suggests a modelling formalism for supporting systematic reuse of software engineering technologies during planning of software projects and improvement programmes in Final Year Project Centers in Chennai.

      Spring Framework has already made serious inroads as an integrated technology stack for building user-facing applications. Spring Framework Corporate TRaining the authors explore the idea of using Java in Big Data platforms.
      Specifically, Spring Framework provides various tasks are geared around preparing data for further analysis and visualization. Spring Training in Chennai

  2. Melbourne Motorcycle Accident Attorney Sinclair Law - Leading Florida Law Firm Attorney Brad Sinclair Represents Personal Injury, Car Accident, Motorcycle Accident Victims in Melbourne.

  3. Thanks for your sharing! The information your share is very useful to me and many people are looking for them just like me. Thanks!

    If you want you can click here to see friv online games for kids. Thanks!

  4. It's very important for modern people to use phones and computers to study! Talking about that, I lost my phone and only advices from this useful source could help me.

  5. I'm shakshi.I am working in India top most Escort serviceEscort service in Mumbai.If u want to join the all facility of escortsEscort service in Bhubaneswar.pls call me & whatssapEscort service in Puri
    visit the sites.Escort service in Cuttack

  6. Hi Guys I'm Archana Kumari the most renowned call girls service provider. If you are not satisfied with your wife on bed and want to fulfill your dream of getting orgasm and full sensual entertainment with amazingly beautiful girls, Please follow me on the links given bellow.

    Escort services in Mumbai
    Escort services in Puri
    Escort services in Cuttack

    Escort services in Bhubaneswar
    Escort services in Gurgaon
    Escort services in Gurgaon

    Escort services in Jaipur
    Escort services in Jaipur
    Escort services in Jaipur

  7. You should set up associations on social networking sites
    Friv 2019,
    Minecraft pc,

  8. Ahh that is great thank you ! Good for special needs too ! build royale

  9. I am an academic writer and researcher at Sample Assignment. I just reached to your content; it has explained each point clearly. Students who are looking for this sort of help or questions, they can get help with the above content. Need further details? Just get in touch with Sample Assignment experts who are skilled, talented and experienced in providing assignment experts for the Australian university students. We guarantee that you will get the best and affordable academic assistance at services like spss assignment help.

  10. TreasureBox is operated by a group of young, passionate, and ambitious people that are working diligently towards the same goal - make your every dollar count, as we believe you deserve something better.
    Check out the best

    pregnancy pillow nz
    chicken coops nz

  11. When student purchases Persuasive Essay Services from our firm, we strive to ensure that their identities are concealed and their data is in proper storage and away from free sites. All students who seek to access Custom College Research Papers should contact our support team for assistance and purchase our services to attain better grades and learn writing from our authors.

  12. The article you have shared here very awesome. I really like and appreciated your work. I read deeply your article, the points you have mentioned in this article are useful
    fleeing the complex

  13. Get various services from geek squad for solving any of your problems or issues. It provides 24 hours of service. If you want to get better offers from geek squad, then visit Best Buy Geek Squad Tech Support.

  14. Many people think using their favorite Internet search engine is enough to find the data they need and do not realize that most of the Internet is not indexed by search engines UPSers


  15. If You are looking for something different, then I am ready. Escorts in Ajmer. I am well educated, have an open mind and have the girlish charm that Is fun and easy to be found. You will always find me smart, clean and fresh as I am very conscientious about my hygiene and I expect all my clients to reciprocate in the same manner. Check our other Services...
    Call Girls in Ajmer
    Russian Escorts in Agra
    Hi Profile Call Girls in Jaipur
    Russian Call Girls in Pune