Proposal - "Tool Talk"

[Grendel]

I wanted to propose an idea that's been nagging me for a while. I know that the people who come to DefCon arrive with a huge variety of skills and knowledge, but the only way this knowledge is formally shared is the presentation of new ideas and new tools during the talks. What I would like to propose is a series of short lectures discussing the different tools already available - especially those tools commonly used within pentesting. For some, this would be a review, but for many it's an opportunity to learn about a tool in a more class-like environment.

My thought is to have a small room, similar in size to the post-presentation talk rooms, where a series of 1-hour classes are given. These classes will start with the more well-known tools (such as nmap, nessus, etc.), and gradually move into less well-known but equally as powerful tools (such as scapy).

So, who would do this? I personally would be willing to do 12 lectures - 6 on Friday and 6 on Saturday, to run parallel with the talks. I have a slew of proof I'm a good candidate to give these lectures, but won't parade them unless necessary.

Anyway, I'd be willing to do this if people are interested, and someone is willing to carve out a dedicated room for me. Naturally, I'm curious to know if anyone else was willing to do a session or two. But that's my offer - I look forward to seeing if it'll fly.

[Phreakre]

Re: Proposal - "Tool Talk"

Personally, I think it's a cool idea. No one operator handles every section of the field and most don't run across every cool tool or theory on a daily basis [or even a yearly one]. We get easily caught up in some new niche exploit or attack vector, but often these are of limited utility. A bit of looking back doesn't seem unwarranted.

.. of course, handing out pdf's of "Owning the Maximum Grey Hat Security Box" book might be just as effective. Lectures are generally reserved for the future, not the past.

[Thorn]

Re: Proposal - "Tool Talk"

I wanted to propose an idea that's been nagging me for a while. I know that the people who come to DefCon arrive with a huge variety of skills and knowledge, but the only way this knowledge is formally shared is the presentation of new ideas and new tools during the talks. What I would like to propose is a series of short lectures discussing the different tools already available - especially those tools commonly used within pentesting. For some, this would be a review, but for many it's an opportunity to learn about a tool in a more class-like environment.

My thought is to have a small room, similar in size to the post-presentation talk rooms, where a series of 1-hour classes are given. These classes will start with the more well-known tools (such as nmap, nessus, etc.), and gradually move into less well-known but equally as powerful tools (such as scapy).

So, who would do this? I personally would be willing to do 12 lectures - 6 on Friday and 6 on Saturday, to run parallel with the talks. I have a slew of proof I'm a good candidate to give these lectures, but won't parade them unless necessary.

Anyway, I'd be willing to do this if people are interested, and someone is willing to carve out a dedicated room for me. Naturally, I'm curious to know if anyone else was willing to do a session or two. But that's my offer - I look forward to seeing if it'll fly.

Hear, hear! Great idea!

Let me make you an offer, Grendel. If you don't manage to get a room set aside, we can make some space available for at least a few hours at the Wireless Village for one or two sessions. We (the Church of WiFi) have been told (unofficially so far) that we can run the Wireless Village again this year, and I know I can speak for the other members that this would be a welcome addition. While it's not wireless per se, it fits right in with out philosophy of teaching people how to actually perform hacking tasks, and not just talk about them.

I'll even volunteer to help teach as basic session whether it's in a room you get or at the Wireless Village. (I can do the basics now, you said so! )

One more thing... Let me make a blatant plug here: Grendel's Pen Testing Fundementals course at heorot.net is a great learning experience. People, if you don't want or need to take the course, you should at least be downloading and trying Grendel's free De-ICE pentest ISOs from www.de-ice.net. They're a great way to sharpen skills, and you will no doubt learn some new methods for your hacker bag o' tricks.

[DaKahuna]

Re: Proposal - "Tool Talk"

Damn I would love to sit in on some of these talks ! Mini-sessions like this would be great. If there can be enough desire demonstrated and teacher/speaker commitment, maybe DT will even spring for half of a skybox, providing something is available.

[Salem]

Re: Proposal - "Tool Talk"

I think this is an awesome idea. I'm sure that it'd be a hit with some of the older folks, as well as the newer attendees.

I couldn't really do a talk on anything, except maybe spam email. But I'm sure I'd be attending these talks during the downtime.

I really hope to see this idea take off.