Ed Skoudis EXPLOITS Replay vulnerability
Ed's team found and demonstrated exploitation of a replay vulnerability in the toy's wireless messaging.
Explicit Confidence 98% · Ed Skoudis EP 121 Details
“we found a replay vulnerability”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Ed Skoudis EXPLOITS Replay vulnerability
Ed's team found and demonstrated exploitation of a replay vulnerability in the toy's wireless messaging.
Explicit Confidence 98% · Ed Skoudis EP 121 Details
“we found a replay vulnerability”
Beau Woods MEMBER_OF I Am The Cavalry
Beau Woods says he is a volunteer with I Am The Cavalry.
Explicit Confidence 99% · Beau Woods EP 121 Details
“I’m a volunteer with a grassroots initiative called I Am The Cavalry”
Ed Skoudis MEMBER_OF Bell Labs
Jack says Ed went to work at Bell Labs; this indicates an employment relationship.
Explicit Confidence 97% · Jack Rhysider EP 121 Details
“he went to work at Bell Labs”
Ed Skoudis MEMBER_OF SANS Institute
Ed Skoudis says he is an instructor with the SANS Institute.
Explicit Confidence 99% · Ed Skoudis EP 121 Details
“I am an instructor with the SANS Institute.”
Mark Rasch MEMBER_OF Department of Justice
Ed describes Mark Rasch as one of the chief prosecutors of Kevin Mitnick from the Department of Justice.
Explicit Confidence 96% · Ed Skoudis EP 121 Details
“one of the chief prosecutors of Kevin Mitnick back in the day from the Department of Justice”
Biohacking Village Device Lab PART_OF Defcon
Jack describes the Biohacking Village Device Lab as an activity at Defcon.
Explicit Confidence 98% · Jack Rhysider EP 121 Details
“What Beau helps organize is the Biohacking Village Device Lab”
“This year at Defcon at the Biohacking Village, we have a Device Lab.”
Ed Skoudis USES penetration testing
Ed identifies himself as a penetration tester and describes performing penetration tests.
Explicit Confidence 99% · Ed Skoudis EP 121 Details
“I am a penetration tester”
Ed Skoudis USES Virtual private network
Ed describes conducting internal testing while connected through a VPN as a low-privilege employee.
Explicit Confidence 98% · Ed Skoudis EP 121 Details
“We just want to be on the internal network, VPN’d in.”
Ed Skoudis USES cross-site scripting
Jack says Ed's team tested websites for cross-site scripting vulnerabilities.
Derived Confidence 94% · Jack Rhysider EP 121 Details
“see if those websites were vulnerable to cross-site scripting attacks”
Ed Skoudis USES Replay attack
Ed explains that his team captured wireless packets and replayed them to make the toy speak.
Explicit Confidence 99% · Ed Skoudis EP 121 Details
“we could sniff that packet and capture it”
“In a replay attack, you simply replay the packet that you capture.”
Ed Skoudis USES SQL injection
Jack says Ed's team tested websites for SQL injection vulnerabilities.
Derived Confidence 94% · Jack Rhysider EP 121 Details
“or SQL injection attacks”
Ed Skoudis USES Vulnerability scanning
Ed describes scanning systems to identify potential vulnerabilities during a penetration test.
Explicit Confidence 95% · Ed Skoudis EP 121 Details
“moving on to finding a list of potential vulnerabilities with them”
Ed Skoudis USES Nmap
Ed says his team uses NMAP to discover available systems and open ports during attack-surface mapping.
Explicit Confidence 99% · Ed Skoudis EP 121 Details
“you’re using various tools, NMAP is a very popular one”
Lisa Forte ASSOCIATED_WITH insider threat
Lisa identifies insider threats as her area of work and says she helps companies develop insider-threat programs.
Explicit Confidence 98% · Lisa Forte EP 122 Details
“insider threats is my sort of area”
Axie Infinity cryptocurrency theft ATTRIBUTED_TO government of North Korea
Jack says the theft was attributed to the government of North Korea.
Attributed Confidence 98% · Jack Rhysider EP 122 Details
“This was attributed to be the work of the government of North Korea”
Red Goat Cyber Security DEVELOPED_BY Lisa Forte
Lisa says she left her prior job and started her own cybersecurity company called Red Goat.
Explicit Confidence 96% · Jack Rhysider EP 122 Details
“she left that job and started her own cyber-security company called Red Goat”
Think Before You Link DEVELOPED_BY MI5
Lisa says MI5, together with another organization, launched the Think Before You Link campaign.
Explicit Confidence 96% · Lisa Forte EP 122 Details
“MI5 in the UK have – with another organization have launched a Think Before You Link campaign”
City 40 DEVELOPED_BY Soviet Union
Lisa says City 40 was created by the Soviet Union for its nuclear program.
Explicit Direction flagged Confidence 98% · Lisa Forte EP 122 Details
“City 40 which was created by the Soviet Union to create their nuclear program”
Axie Infinity cryptocurrency theft INITIAL_ACCESS_VIA LinkedIn
Jack says the attackers got into Axie Infinity through LinkedIn by enticing employees with job offers.
Attributed Confidence 97% · Jack Rhysider EP 122 Details
“the way they got in was through LinkedIn”
piracy in the Horn of Africa INVOLVES OSINT
Lisa says Somali pirates conducted OSINT to identify ships and plan attacks.
Explicit Confidence 98% · Lisa Forte EP 122 Details
“they were doing OSINT”
USS Cole attack INVOLVES Al-Qaeda
Jack says Al-Qaeda took credit for the USS Cole attack.
Explicit Confidence 99% · Jack Rhysider EP 122 Details
“Al-Qaeda took credit for this attack”
Axie Infinity cryptocurrency theft INVOLVES Malware
Jack says opening the document placed malware on an employee's work computer and gave the attackers network access.
Attributed Confidence 98% · Jack Rhysider EP 122 Details
“when the employee opened the document, malware was put on their work computer”
piracy in the Horn of Africa INVOLVES insider threat
Lisa says Somali pirates were running insiders in European insurance companies as part of their operations.
Explicit Confidence 94% · Lisa Forte EP 122 Details
“they were running insiders and big insurance companies in Europe”
Axie Infinity cryptocurrency theft INVOLVES social engineering
The Axie Infinity attack involved enticing employees with job offers and manipulating them into opening a document.
Explicit Confidence 97% · Jack Rhysider EP 122 Details
“enticed them with great job offers”
USS Cole attack INVOLVES USS Cole
The USS Cole attack involved the USS Cole, which was damaged by a bomb detonated alongside it.
Explicit Confidence 98% · Jack Rhysider EP 122 Details
“a barge came up alongside it and it detonated a bomb right next to it”