DEF CON 20 (2012) - Tenacious Diggity (HD - Full Video) - 29July2012

29 July 2012 - DEF CON 20 (2012) Fran Brown - Bishop Fox http://www.bishopfox.com/resources/tools/google-hacking-diggity/ https://www.defcon.org/html/defcon-20/dc-20-speakers.html#Brown All brand new tool additions to the Google Hacking Diggity Project - The Next Generation Search Engine Hacking Arsenal. As always, all tools are free for download and use. When last we saw our heroes, the Diggity Duo had demonstrated how search engine hacking could be used to take over someone's Amazon cloud in less than 30 seconds, build out an attack profile of the Chinese government's external networks, and even download all of an organization's Internet facing documents and mine them for passwords and secrets. Google and Bing were forced to hug it out, as their services were seamlessly combined to identify which of the most popular websites on the Internet were unwittingly being used as malware distribution platforms against their own end-users. Now, we've traveled through space and time, my friend, to rock this house again... True to form, the legendary duo have toiled night and day in the studio (a one room apartment with no air conditioning) to bring you an entirely new search engine hacking tool arsenal that's packed with so much tiger blood and awesome-sauce, that it's banned on 6 continents. Many of these new Diggity tools are also fueled by the power of the cloud and provide you with vulnerability data faster and easier than ever thanks to the convenience of mobile applications.Just a few highlights of new tools to be unveiled are: * AlertDiggityDB * Diggity Dashboard * Bing Hacking Database (BHDB) 2.0 * NotInMyBackYardDiggity * PortScanDiggity * CloudDiggity Data Mining Tool Suite * CodeSearchDiggity-Cloud Edition * BingBinaryMalwareSearch (BBMS) * Diggity IDS So come ready to engage us as we explore these tools and more in this DEMO rich presentation. You are cordially invited to ride the lightning.