Sourcecon Spring 2018 day 3, General Sessions.

First up Aaron Lintz Conference List Gold. Aaron talks about getting conference list utilizing tools such as Google Search Console, Eventbrite, and Lanyrd, Postman, Fiddler, Burpsuite, Wireshark, ZAP, PacketCapture for Android. This technique is very technical and way to hard to explain in one post. Instead, I suggest you attend one of Aaron’s Webinars and enjoy. That said on little gem I will give you is, you can get an android emulator, such as NOX, that can allow you to run Android on your windows or apple system to use this trick. The trick itself centers around grabbing packets from the event app you are targeting, Within these packets are pure gold and usually a listing of attendees. Of course realize most conferences and such have a twitter stream and if you pay attention you can often get this same info from it, or even just grab all those who are members and there you go. However quick as those list don’t stay up forever.

Next up Lisa Bock and how to Hack the Perfect Recruit. Tools mentioned Archie.icm.edu.pl, Google Hacking Database (GHDB), Semantic, Natural Language, OnionLink(TOR), OSINT specifically Inteltechniques and the OSINT tools that have there. You can go to my You tube page to see videos on them as I am doing a series on them.

That’s it for day 3 General  Sessions, next week we will start with Day 3 Programmers Sessions.