Voir la source de Portail:SecurIMAG Ensimag IT security and hacking club/Meetings

==Upcoming Meetings==
* We are meeting every Thursday (except during uni holidays) generally from 5pm15 till 6pm45

<include iframe="yes" width="100%" height="200px" src="https://www.google.com/calendar/embed?mode=AGENDA&height=200&wkst=1&bgcolor=%23FFFFFF&src=car-online.fr_2ib9vtt29brqlcb67afhfj34qc%40group.calendar.google.com&color=%236B3304&ctz=Europe%2FParis" />

==Previous meetings==
* 2014-01-23 [[File:Soutenance_ECC_-_Janvier_2014.pdf]] by [[user:degoerdf]] and [[user:jeanneg]]
* 2013-12-12 [[File:The_multithreaded_Nyan_cat_journey.pdf]] by [[user:degoerdf]] and [[user:jeanneg]]
* 2013-11-28 [[File:Securimag-2013-11-28-A_Walk_Into_Sha1.pdf]] by [[user:grandemk]]
* 2013-11-18 [[File:Securimag-2013-11-18-GreHack2013-CTF_Writeup_Deva.pdf ]] by [[user:jeanneg]]
* 2013-11-07 [[File:SecurIMAG-2013-11-07-Steganography_in_pdf.pdf ]] by 0x835
* 2013-10-24 [[File:SecurIMAG-2013-10-24-Quantum Cryptography - the keychain of Schrodinger's cat.pdf ]] by [[user:degoerdf]]
* 2013-10-03 [[File:SecurIMAG-2013-10-3-RE_Fun&Profit.pdf]] by [[user:desplanf]]
* 2013-09-26 [[File:SecurIMAG-2013-09-26-Presentation_Attacks_Using_Malicious_Devices-Fran%C3%A7ois_Desplanques-Guillaume_Jeanne.pdf ]] by [[user:desplanf]] & [[user:jeanneg]]
* 2013-07-18 [[File:SecurIMAG-2013-07-18-Attacks_Using_Malicious_Devices-Fran%C3%A7ois_Desplanques-Guillaume_Jeanne.pdf ]] by [[user:desplanf]] & [[user:jeanneg]]
* 2013-03-22 [[SecurIMAG-CTF_Write-ups]]
* 2013-03-21 [[File:SecurIMAG-2013-03-22-ForbiddenBits_Reverse-Engineering_Challenges.pdf‎ ]] by [[user:desplanf]]
* 2012-12-06 [[File:SecurIMAG-2012-12-06-Questions_asked_during_interview.pdf]] by [[user:jeanneg]]
* 2012-11-22 [http://www.liglab.fr/spip.php?article1270 Maciej Korczynski - PhD Defense - Classifying Application Flows and Intrusion Detection in Internet Traffic] ([http://mi2s.imag.fr/classifying-application-flows-and-intrusion-detection-in-internet-traffic VIDEO])
* 2012-11-15 challenge writing time
* 2012-11-08 [[File:SecurIMAG-2012-11-08-GreHack-2012-how_to_create_a_hacking_conference_and_make_its_website_survive.pdf|GreHack 2012 - how to create a hacking conference and make its website survive]]
* 2012-10-25 grehack challenges corrections, by Ajax, deva
* 2012-10-19 [http://grehack.org GreHack], première conférence + CTF de hacking à Grenoble, a 1H de Lyon (réservation nécessaire)

* 2012-09-27 [[user:petitalb]] : [[Fichier:SecurIMAG-2012-09-27-iOS_data_protection.pdf]]

* 2012-09-06 [[Fichier:SecurIMAG-2012-09-06-pub_rentree.pdf|SecurIMAG fait sa rentrée!]] Amphi E à 17H

* 2012-05-23 - [[Fichier:table_ronde_a_Grenoble_IUT2.pdf]]

* 2012-04-26 [[user:mougeyc]] : [[Fichier:SecurIMAG-2012-04-26-botnet-brief_state_of_the_art.pdf]] (request video access to [[user:mougeyc]])

* 2012-04-19 [[user:martincl]] + [[user:tollardt]]: [[Fichier:4MMSR-2011-2012-student seminar-Recent advances in IPv6 insecurities - Marc van Hauser Heuse - 27C3-CCC 2010.pdf]]

* 2012-04-05: [[File:SecurIMAG-2012-04-05-Filiere_Ensimag_et_Metiers_Securite-un_point_de_vue.pdf]] (request video access to [[user:duchenef]])

* 2012-04-05: P. Malterre - The Onion Router (TOR) + Information System Monitoring (slides will not be publicly available. contact the author or [[user:duchenef]]) 

* 2012-03-29: current Fabien's work: [http://car-online.fr/en/spaces/fabien_duchene/publications/2012-04-SecTest-ICST/ XSS Vulnerability Detection Using Model Inference Assisted Evolutionary Fuzzing] [[File:SecurIMAG-2012-03-29-XSS_Vulnerability_Detection_Using_Model-Inference_Assisted_Evolutionary_Fuzzing.mp3]]

* 2012-03:21: street SecurIMAG: discussions about [[SecurIMAG-2012-CTF-GreHack-public]]. For SecurIMAG members see [[SecurIMAG-2012-CTF-GreHack-private]]

* 2012-03-08: blackbox basic pentest of a web application  http://www.pokersmashnote.com
* 2012-03-01: [[File:SecurIMAG-2012-03-01-Wifi_security-WEP_%26_WPA_vulnerabilities-guillaume_jeanne.pdf|Wifi_security]], [[user:jeanneg]] [http://www.youtube.com/watch?v=RPtyUXsDk4o 802.11 Security (video)]

* 2012-02-09: [[File:SecurIMAG-2012-02-09-Let_me_SQL_injection_your_heart-Franck_DG-Fabien_D.pdf|Let me SQL inject your heart!]], [[user:degoerdf]] [[user:duchenef]] (Audio: [[Fichier:SecurIMAG-2012-02-09-Let_me_SQL_injection_your_heart-Franck_DG-Fabien_D-audio.mp3]])
<pre>
svn checkout https://svn.sqlmap.org/sqlmap/trunk/sqlmap sqlmap-dev
</pre>
* 2012-02-02: [[File:SecurIMAG-2012-02-02-miasm_a_reverse_engineering_framework-serpiliere.pdf|Miasm - a python reverse engineering framework!]], by [http://www.droids-corp.org/ Serpiliere - Fabrice Desclaux - Serpi] (remote streaming) ; [https://code.google.com/p/miasm/ MIASM at googlecode]
<pre>
hg clone https://code.google.com/p/miasm/
</pre>
* 2012-01-26: [[5MMSSI-2011_Hacking_CTF_like_practical_exam|Hacking CTF like security examination]] + paper XSS vulnerability detection using model inference assisted fuzzing, [[user:duchenef]]
* 2012-01-12: [https://twitter.com/#!/MargaretZelle Alexandra Ruiz] (LEXSI) - [[Fichier:SecurIMAG-2012-01-12-Legal_aspects_in_infosec-Alexandra_Ruiz-LEXSI.pdf|Legal aspects in infosec]] [[Fichier:SecurIMAG-2012-01-12-Legal_aspects_in_infosec-Alexandra_Ruiz-LEXSI.mp3|Legal aspects in infosec (Audio)]]
* 2011-12-15: [[User:Hamraoua]] + [[User:duchenef]] - [[Fichier:SecurIMAG-2011-12-15-Android_Security-Back_to_basics-Fabien_D-_Adrien_H.pdf]] ([[Fichier:SecurIMAG-2011-12-15-Android_Security-Back_to_basics-Fabien_D-_Adrien_H.mp3|Audio, french]])
* 2011-12-08: [[Utilisateur:tourong|Guillaume]] + [[Utilisateur:duchenef|Fabien]] - [[Fichier:SecurIMAG-2011-12-08-Windows_NT6.1-Live_forensics_and_exploitation.pdf]] ([[Fichier:SecurIMAG-2011-12-08-Windows_NT6.1-Live_forensics_and_exploitation.mp3|Audio, french]])
* 2011-12-07: [[Fichier:SecurIMAG-2011-12-07-Mathieu_Blanc-CEA-.pdf]] invité par [http://www-verimag.imag.fr/~potet M.L. Potet]
* 2011-12-01: [[Fichier:SecurIMAG-2011-12-01-sanjay-plz_gimmie_a_ROPe.pdf]] ([[Fichier:SecurIMAG-2011-12-01-sanjay-plz_gimmie_a_ROPe.mp3|Audio, english]]) [https://sites.google.com/site/securitythoughts/ Sanjay]
* 2011-11-24: Securimag challenges correction [[User:hossen]] [[User:tourong]]
* 2011-11-17: [[Fichier:SecurIMAG-2011-11-17-teach-a_long_way_from_browser_vulnerability_to_kernel_exploitation.pdf]] [http://vxhell.org teach]
* 2011-11-10
** [[Fichier:SecurIMAG-2011-11-10-Hacker_profiling-duchene_fabien-mougey_camille.pdf]] [[Utilisateur:mougeyc|Camille]] + [[Utilisateur:duchenef|Fabien]]
* 2011-11-03 5pm-6pm30
** Hari, internet banking security [[Fichier:SecurIMAG-2011-11-03-Hari-Internet_banking_security.pdf]] [[Fichier:SecurIMAG-2011-11-03-Hari-Internet_banking_security.mp3]]

* 2011-10-20 5pm-6pm30 - ensimag Amphi E
** pentesting missions. next talks. discussions
** (eventually) correction of from blind SQL injection to Local File Inclusion [[Fichier:5MMSSI-2011-2012-TP2-web_exploitation_and_basic_risk_analysis.pdf]]
** (eventually) Arnaud wargame proposal: http://intruded.net http://root-me.org

* October 13th 2011
** Nothing. "Ensimag corporate partners day"

* October 6th 2011, <b>5pm-6pm30</b> - Ensimag - Amphi E
** Camille : [[Fichier:Securimag-2011_10_06-MOUGEY_Camille-Introduction_to_XSS_attacks.pdf|XSS, BeEF (Browser Exploitation Framework)]]
*** Suggested reading before the talk: 
**** 5MMSSI-Common vulnerabilities and attacks - web, Fabien, Karim: [[Fichier:5MMSSI-2011-2012-1-common_vulnerabilities_and_attacks-chapter_1-web.pdf]]
**** Julien, Camille : [[Fichier:CSRFIntro.pdf]]
*** Suggested practical assessment before the talk: [[5MMMSI-2011-2012-practical_assessment-web_exploitations_and_basic_risk_analysis]]


*September 29th 2011, <b>5PM-6PM30!!!</b>, Amphi E
** [[User:benjamio]], [[Fichier:securimag-2011-09-29-Olivier_Benjamin-A5-2_exploitation_tool.pdf]]
** [http://www.ni69.info/security-gsm-en.php A5/2 HackTool] ([http://www.ni69.info/documents/engineering/gsm/A52HackTool.pdf A5/2 HackTool Paper])

* 2011-09-22
** Arnaud, [[Fichier:SecurIMAG-2011-09-22-Arnaud-Defeat_userland_exploits_on_Linux.pdf]]
*** requirement: [[Fichier:SecurIMAG 2001 05 19 Smashing the stack for fun and fun Memory protections and bypass methods.pdf]] - Karim & Guillaume 
*** also see the [[5MMSSI-2011-2012-practical_assessment-basics_in_exploitation|introduction to practical buffer overflow exploitation]]

*2011-06-09. 6pm-7pm30, amphi E
** Damien, [[Fichier:SecurIMAG-2011-06-Boost your bruteforcers by learning how to program your expensive CPU.pdf]]
** [[Fichier:SecurIMAG-2011-05-26-windows_security_for_n00bs-part3-authentication-Fabien_Duchene-Karim_Hossen.pdf]]

*2011-06-01. 6pm-7pm30, amphi E
** An Accurate Sampling Scheme for Detecting SYN Flooding Attacks and Portscans, Maciejk [[Fichier:securimag-2011-06-maciejk-An_Accurate_Sampling_Scheme_for_Detecting_SYN_Flooding_Attacks_and_Portscans-paper.pdf]]
** [[Fichier:Compte rendu des Etats Generaux de l'Identite Numerique.pdf]], Senat, Avril 2009, Yves

*2011-05-26. 6pm-7pm30
** [[Utilisateur:menegazp|Pedro]], [[Fichier:SecurIMAG-Some_Network_Threats_-_VoIP_SIP_Based_-_Pedro_Paganela.pdf|Some Network Threats: VoIP SIP Based]] 
** Julien, Camille : [[Fichier:CSRFIntro.pdf|Web-Attacks CSRF]]

*2011-05-19. 6pm-7pm30
** [[Fichier:SecurIMAG_2001_05_19_Smashing_the_stack_for_fun_and_fun_Memory_protections_and_bypass_methods.pdf]] - Karim & Guillaume

*2011-05-12. 6pm-7pm30
** [[Fichier:SecurIMAG-2011-05-12-windows_security_for_n00bs-part1-security_components_and_access_control-Fabien_Duchene.pdf]]

*2011-05-05 5pm30-7pm30
** Camille, web challenge
** [[Utilisateur:menegazp|Pedro]], [[Fichier:SecurIMAG-2011-05-05-Internal_Network_Threats-Pedro_Paganela.pdf|Some internal network threats]] 
* 2011-04-28 5pm30-8pm
** [[Fichier:Online_%26_real-life_privacy-on_a_nudist_beach_everyone_has_the_same_privacy-Fabien_Duchene-SecurIMAG-2011-04-28.pdf|On a nudist beach, everyone has the same privacy (focusing on privacy, mostly online)]] (si besoin disponible sur [http://www.box.net/shared/gp5nto0onh Box.Net]), [[Utilisateur:duchenef|Fabien Duchene]] 
* 2011-04-21 5pm30-7pm, D327
**Epreuve Crypto 200, Nuit Du Hack Prequals, WriteUps intéractif, Arnaud ( ~ 10 min )
**ideas
*2011-04-14
** [[Analyse_de_code_binaire_pour_la_d%C3%A9tection_de_vuln%C3%A9rabilit%C3%A9s|Analyse de code binaire (dependances) pour la détection de vulnérabilités]], Guillaume
** [[Test_en_frelatage_%28fuzzing%29_et_code_binaire|Métriques de couverture de code binaire pour le test de vulnérabilités]], Olivier
*2011-03-31 
** [[Fichier:Introduction_to_the_Microsoft_PKI_Active_Directory_Certificate_Services_2008_R2-Fabien_Duchene.pdf|Introduction to the Microsoft PKI Active Directory Certificate Services 2008 R2: concepts, solution conception and pentesting]] (also available on [http://www.box.net/shared/q8eqr4xbd8 box.net]) [[Utilisateur:duchenef|Fabien Duchene]]
*2011-03-24
** Utilisation de graphes d'attaques pour tester la securite d'un systeme by Bilal Kanso, presented by [[Utilisateur:duchenef|Fabien Duchene]]
*2011-03-17
** Practical padding oracle attacks, BlackHat US 2010, presented by Karim
** SmartFuzzing, presented by Olivier
*2011-03-10
** Apple iOS security mechanisms, [[Utilisateur:duchenef|Fabien Duchene]]
*2011-03-03
** Overview of stack-based buffer overflows, protection and exploitation (live presentation :)), Karim