BSidesWarsaw track 2 dzień 1

I would like to say that we are not using other technologies. But this is my answer to the question about the risk of using the data without access to the network. We are not using other resources. We can see here that there are some first steps that allow us to use this accessibility without being in the same network or without any more information. to the SSH, in the context that we see here only the first charts appear, in which the advantage is OpenBAS. We have here, we can say that in these databases, a greater movement from OpenBAS and somewhere around 1500 in the context that we see so many of these quantities that are remotely Ok, it's detected

somewhere. There is no chance that the first control will be remote control. If it goes somewhere around 10,000, considering that the first tax rate is 50,000, it is also detected. and the solutions to the problem. So we will have two verified CFOs, the chances that the first control will be a remote control, two verified CFOs will be selected, and the number of verified CFOs will be selected, and the number will be selected, and the prioritization of verified, authorized remote sources will be selected. As you can see, there are a lot of results. The overall value of the verified CFO is the same as in the open-vastage. As you can see, the version of the conversion is the

same as in the open-vastage. In OpenVAS version we have the same, but we have lower limits. In OpenBUS it is more complicated. It's a plug-in for the MS-Sense, but it needs to be improved. We are just trying to improve the application scans. Comparison videos. We are not talking about the CFO's tactics. MS-Sense is a bit worse. It's based on XSS plug-ins. My CSS is not working well with web applications. I can't talk about the CPU, but I want to check how it works. I wanted to check how it looks like when I get down to the scanner and test it. We can say run at the lowest cost, at the lowest time. Because we also want to

check in this context what this presentation is about. In the break for tea, are we able to do these tests, will it be adequate and will we be able to get anything out of it. Generally, as it says, in my opinion, it is not professional. Here, I just did these tests. Screen, I see that it looks like this. I see it doesn't look the best, but maybe we can make something out of it. In the end, there is a little bit of it. We are working on the same infrastructure, this is how the interface looks like. It's nice to see that there are such possibilities. We have here some different scans from local infrastructure. We can check the network configuration of our server.

We are talking about the old infrastructure, we are talking about the SSH configurations and so on. But it is good to know that there are such possibilities. I have done local analysis of the server configurations. I did a scan of the front of the scanner In case of advanced scan, we have more of configuration, it is quite simple. In OpenVAS, for example, we have to create targets, enter that we want to have full range of ports, set targets, enter there. We have a little more information here. We have more parameters here, maybe we can leave it here. Nesus scanned the web application, because he would not do it by default. We can also set how

many pages will be used for crawling. We can also set how many pages will be used for crawling. I like the fact that it's on the go, even from what I remember, the OpenBAS interface is there I think it's a very good thing that we have a lot of free time, we can also treat it a bit like Faze Academy. We have here, I like that you are updating the news set, I remember when we were doing the news set, there is a lot of news, we can also treat it a bit like Faze Academy, we can say, we can give you such information about what news set we are doing. NVTS, which is ...

So we have a lot of information, there is a graph that takes information about how many frequencies are visible in the data. We also have a reliable information on the Internet, which is 552, which is a plus for us. We know what it contains. There is no visible and no information about the Internet. What can we say that is a plus for us? We know what it contains. And here, as you can see, in Facebook, there is a little window, you can say, but as you can see, it's a task that can be done by a single click in our site. It's not really that. But there is a kind of basic scan that we can do.

It's more or less from that level. We have more information about what is based on what. Here we have the base, we can read it somewhere in other places. But it's also... I think it's worth to appreciate the specificity of this open-vose approach. Yes, more or less, there are 5 information. As I mentioned before, ESSENTIAS allows us to have a maximum of 16,000 PLN. We can't use this essential, but we can use it commercially. The essential is from the program, but it's just aggregated somewhere. Nessus Essentia, to highlight the potential without their development, you can use your laptop to report less of these potentials than ProRaptor, it just aggregates and sometimes in one click, it just comes up. That's right, it looks

like Nessus and Opalbus, I'm a little surprised with the reports on my laptop, I wanted to show you how it looks like, if it's enough time, a test, it just comes up, it's like a infrastructure test, I wanted to show you how the report from the infrastructure test looks like. I couldn't find it until I looked at the report from other companies, when it comes to the infrastructure safety test. I found it in 2019, but it was not available in the public report. Anyway, I found it in 2019, but it was not available in the public report. Anyway, And here we have information about how the test was performed. We have a specific approach to the test, which

we are going to discuss in a moment. I think that's a different name. I don't have any information about that. There is not much information here, but the internal methods of conducting tests are similar. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the

methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the

methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the

methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of the methods from earlier. I think I've hidden some of In fact, in a similar approach, there is a very good As far as I know. We also have information about the use of tools, automatic, even automatic information about what is the importance of a given property. Here we also have, in a similar way, even automatic information about the use of tools. What is the importance of this property? We have a list of contents. We can check what property we have. If we have a report that is related to the school, we can check what is generated by the system. Generally, when it comes to

such a report, it is more extensive, which is also the most generated by Susse and Porniasa. We try to make the reports as detailed as possible, so that they are as comprehensive as possible. I think that it is also possible to read them in a less technical way. I think that we have information here in the details of the technical, medical, but I think that it is also possible to read them in a less technical way. Here we have information about the activity of the standard of sensitivity. As far as I remember, the test itself was detected by the standard of sensitivity. But when it comes to the tests, verification of whether the tax is positive, we have information here without manual verification.

We don't talk about the test of infrastructure, tax, security. We have information here about the service we used. Here we can see how the code is being sent, the type of information about the service line, the so-called code that allows us to verify the availability of the server.