Thursday, April 30, 2015

Passwords For Nothing

Time to get the creative juices flowing for this years EDUCAUSE Security Professionals Conference.

The following is to the tune of "Money for Nothing" by Dire Straights.  I like to image Knopfler riffing through the whole thing.


Passwords For Nothing


I want my, I want my IRC.
I want my, I want my IRC.
I want my, I want my IRC.
I want my, I want my IRC.

Now, look at that CISO, that's the way you do it.
You play the hax up that were on TV.
That ain't working. (Nothin's gonna do it!)
They get your passwords for nothing, get your creds for free.

No, that ain't working.  AV just won't do it.
Lemme tell you, them guys ain't dumb.
Maybe get a password through a phishy message.
Maybe get a shell with injection.

We got to install UTM software.
Custom snort sigs: deliver me-e-e-e!
We got to move these bad IP packets
We got to install crappy AVeeeee!

The little malware with the logger and the screen caps?
Yeah, buddy, that's on your phone.
The little malware's got an IRC bot.
The little malware is a pesky drone.

We got to install UTM software.
Custom snort sigs: deliver me-e-e-e!
We got to move these bad IP packets
We got to install crappy AVeeeee!

We got to install UTM software.
Custom snort sigs: deliver me-e-e-e!
We got to move these bad IP packets
We got to install crappy AVeeeee!

I shoulda learned to code things in python.
I shoulda learned to code in C.
Look at that backdoor, he's got it, sitting in the web dir, man.
This hacker's no fun.

And what's up where? What's all that? Some cloud-based service?
It looks to be designed by a chimpanzee.
No, that ain't kosher.
That's the way you do it:
If you want all your data given out for free.

We got to install UTM software
Custom snort sigs: deliver me-e-e-e!
We got to move these bad IP packets
We got to install some crappy AVeeeee!

Now, listen here.
Now, that ain't workin'.  Awareness just won't do it.
Your playin' catch-up with an APT.
That ain't workin'!  A vendor just won't do it.
Passwords for nothing, get your creds for free.

Passwords for nothing, and you creds for free.
Passwords for nothing, and you creds for free.
Passwords for nothing, and you creds for free.
Passwords for nothing, and you creds for free.

I want my, I want my IRC.
I want my, I want my IRC.
I want my, I want my IRC.
I want my, I want my IRC.

Monday, April 6, 2015

On The Wire, I Can See

So much is there, right before our little nosy eyes when we have a sniffer and the will to use it.


On The Wire, I Can See

On the wire, I can see
Traffic not destined for me.
In the air, sans SSL,
I enjoy your little show and tell.
In the middle of your session,
I sniff the bits of your connection.
On my screen I see your porn
And private conversations borne
On wings of packets insecure,
While on your end you are so sure,
In ignorance of my leet skills,
While you bank and pay your bills.
With greedy eyes I thank you for
The warning boxes that you ignore.
Until you get all VPNed,
I'll see the stuff you get and send.