Saturday - Joshua Herman

[number6]

Saturday

Saturday August 12, 10:00 – 11:55, Council Boardroom, Forum

Joshua Herman

This tool is a digital assistant that helps you hack. Under the hood it uses langchain (a way to augment LLMss) that currently uses an SMS / MMS / Phone interface that will allow for basic information retrieval tasks (google search, searching shodan, google places) and has the goal of doing complex offensive and defensive security tasks using anything from a dumb phone to a smartphone. It is preprogramed with tools that it can intelligently use to accomplish certain tasks such as performing a search on shodan given an IP address.

I am a release engineer specializing in compliance of information security vendors for post trade currencies. Previously I was a software engineer with experience with distributed computing and UI / UX using Python and Javascript in the same department . I have a decade of professional experience in software engineering in various industries such as insurance, CRM, Trade Show applications, recommender systems and cryptocurrency . I also have contributions to open source projects such as CPython documentation, triaging and features.

Audience - Offensive / Defensive / AppSec

[zitterbewegung]

The source code for this can be found at the GitHub repo can be found at https://github.com/zitterbewegung/saturday/ . More information about the project and instructions for setup can be found there.

[zitterbewegung]

Here is a recon demo that uses shodan to scan an IP and give you its ASN.

[zitterbewegung]

More demo's. This is when it decides not to use shodan and is executing bash commands on the local machine.

[zitterbewegung]

Here this is reasoning based on shodan's output that 1.1.1.1 is a DNS server.

[zitterbewegung]

Here is an example of chaining commands.