[0x0D] - The Virtual Meet

[0x0D] - The Virtual Meet

Goodbye Summer, Hello Autumn. Time flies, even when we're facing the new normal. When dealing with so many unknowns, it is comforting to know you can rely on some things to keep us all going. We want to make sure that we are not falling short of your expectations and bring you every time the very best in the field and tons of knowledge to soak up. That's right, you've guessed it, the 6th meetup is upon us, and we will be welcoming an epic speaker once more.

You might have seen him on TV or found his legendary bugs on mainstream media. He is a speaker at several key security conferences handling top-notch research ranging from fancy green boards to testing daily technology limits. It is a pleasure to announce that we will be having Pedro Umbelino (@kripthor) among us.

Next time, we will keep getting to the heart of the world of Red Teams, and who better than a true hacker to share his experience and know-how.

Don't forget to get your free pass and join us in one more great event!

In the meantime, you can join our Slack chat (https://oposec.herokuapp.com/) to discuss all kind of hackish stuff and, of course, interact with other members.

Hope to see you soon!

[Goals]

Learn something new, get to know other g33ks, and, the most important thing, have fun.

[Agenda]

• "Get in, drop the implant, GTFO II" (EN/PT) by Pedro Umbelino

[Challenge]

Rui Tinto admitted having some information about the snitch from the 0XOPOLEAKS. However, he's unwilling to give the passwords unless his demands of having Kripthor on 0xOPOSEC get fulfilled. Meanwhile, government forces tried to crack the passwords with no success. We know from underground sources that Rui Tinto does cipher each file individually for higher security and privacy. We manage to put our hands on his top-notch closed source software used for encrypting the information.

Leak: https://sefod.eu/oposec/underground_leaks.tar.gz

Can you get the juicy bits? Ping (@)zezadas with the flag!