<!DOCTYPE html><html><head><title></title><style type="text/css">#qt p.qt-MsoNormal{margin-top:0cm;margin-right:0cm;margin-left:0cm;margin-bottom:0.0001pt;font-size:11pt;font-family:"Calibri", sans-serif;}
#qt a:link{color:blue;text-decoration-line:underline;text-decoration-style:solid;text-decoration-color:currentcolor;}
#qt a:visited{color:purple;text-decoration-line:underline;text-decoration-style:solid;text-decoration-color:currentcolor;}
p.MsoNormal,p.MsoNoSpacing{margin:0}</style></head><body><div>Well, Wim has offered to do a talk about Qubes sometime soon, not sure if he's thinking of the next meeting or not, I've asked him.<br></div><div><br></div><div>Anatomy of a pen test might be nice. #1 - agreed scope! Otherwise, this happens :-<br></div><div><a href="https://www.theregister.co.uk/2019/09/13/pentest_arrest_coalfire/">https://www.theregister.co.uk/2019/09/13/pentest_arrest_coalfire/</a><br></div><div><br></div><div><br></div><div id="sig67082176"><div class="signature">-- <br></div><div class="signature"> Jim Cheetham<br></div><div class="signature"> jim@cheetham.nz<br></div><div class="signature"><br></div></div><div><br></div><div><br></div><div>On Sun, 15 Sep 2019, at 9:38 AM, Sequoia Voorkamp via Dunedin-ISIG-cabal wrote:<br></div><blockquote type="cite" id="qt"><div class="qt-WordSection1"><p class="qt-MsoNormal">I think ‘anatomy of a pentest’ would be good, and if people were particularly interested in a phase we could do a more in-depth talk about that at a later meeting – it might be good to get people a bit more engaged.<br></p><p class="qt-MsoNormal"> <br></p><p class="qt-MsoNormal">We could also see if there would be any takers to do something like a round of lightning talks one month.<br></p><p class="qt-MsoNormal"> <br></p><p class="qt-MsoNormal">I’m definitely not ready to talk about something!<br></p><p class="qt-MsoNormal"> <br></p><p class="qt-MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Dunedin-ISIG-cabal <dunedin-isig-cabal-bounces@lists.ourshack.com> <b>On Behalf Of </b>Brendan Murray via Dunedin-ISIG-cabal<br><b>Sent:</b> Friday, 13 September 2019 1:55 PM<br><b>To:</b> Chris Burgess <chris@giantrobot.co.nz><br><b>Cc:</b> Brendan Murray <xasperated@gmail.com>; Planning/Admin for Dunedin ISIG <dunedin-isig-cabal@lists.ourshack.com><br><b>Subject:</b> Re: [DISIG-cabal] Planning for September meeting</span></p><p class="qt-MsoNormal"> <br></p><div><p class="qt-MsoNormal">Hi<br></p><div><p class="qt-MsoNormal">I thought mitmproxy went OK. And Jim does the general infosec well, don't think I'm anywhere near that smooth<br></p></div><div><p class="qt-MsoNormal"> <br></p></div><div><p class="qt-MsoNormal">did you get any suggestions from the troops for the next session?<br></p></div><div><p class="qt-MsoNormal"> <br></p></div><div><p class="qt-MsoNormal">If nobody else has stumped up, might do Shodan for next month. Or 'anatomy of a pentest'? The phases, the tools, of which shodan might be one.<br></p></div><div><p class="qt-MsoNormal"> <br></p></div><div><p class="qt-MsoNormal">Unless Sequoia would like to talk about something. <br></p></div><div><p class="qt-MsoNormal"> <br></p></div></div><p class="qt-MsoNormal"> <br></p><div><div><p class="qt-MsoNormal">On Fri, Aug 23, 2019 at 7:30 AM Chris Burgess <<a href="mailto:chris@giantrobot.co.nz">chris@giantrobot.co.nz</a>> wrote:<br></p></div><blockquote style="border-top-color:currentcolor;border-top-style:none;border-top-width:medium;border-right-color:currentcolor;border-right-style:none;border-right-width:medium;border-bottom-color:currentcolor;border-bottom-style:none;border-bottom-width:medium;border-image-outset:0;border-image-repeat:stretch;border-image-slice:100%;border-image-source:none;border-image-width:1;border-left-color:rgb(204, 204, 204);border-left-style:solid;border-left-width:1pt;padding-top:0cm;padding-right:0cm;padding-bottom:0cm;padding-left:6pt;margin-left:4.8pt;margin-right:0cm;"><div><p class="qt-MsoNormal">I'm away for October meeting too.<br></p><div><p class="qt-MsoNormal"> <br></p></div><div><p class="qt-MsoNormal">A hands on sess with mitmproxy would be a goodie. Maybe see how some IoT things that don't have open interfaces can be interrogated? I have some bathroom scales that work for this (last I checked, assuming they didn't bother pinning certs since a year or two back).<br></p></div></div><p class="qt-MsoNormal"> <br></p><div><div><p class="qt-MsoNormal">On Thu, 22 Aug 2019, 10:38 PM Brendan Murray via Dunedin-ISIG-cabal, <<a href="mailto:dunedin-isig-cabal@lists.ourshack.com">dunedin-isig-cabal@lists.ourshack.com</a>> wrote:<br></p></div><blockquote style="border-top-color:currentcolor;border-top-style:none;border-top-width:medium;border-right-color:currentcolor;border-right-style:none;border-right-width:medium;border-bottom-color:currentcolor;border-bottom-style:none;border-bottom-width:medium;border-image-outset:0;border-image-repeat:stretch;border-image-slice:100%;border-image-source:none;border-image-width:1;border-left-color:rgb(204, 204, 204);border-left-style:solid;border-left-width:1pt;padding-top:0cm;padding-right:0cm;padding-bottom:0cm;padding-left:6pt;margin-left:4.8pt;margin-right:0cm;"><div><p class="qt-MsoNormal">Iso27000 but policy is boring<br></p><div><p class="qt-MsoNormal">Mitmproxy? <br></p></div><div><p class="qt-MsoNormal">Shodan? <br></p></div><div><p class="qt-MsoNormal"> <br></p></div><div><p class="qt-MsoNormal">We'd have to prep a bit though and I'm away for the next 10 days<br></p></div></div><p class="qt-MsoNormal"> <br></p><div><div><p class="qt-MsoNormal">On Thu, 22 Aug 2019, 14:54 Jim Cheetham via Dunedin-ISIG-cabal, <<a href="mailto:dunedin-isig-cabal@lists.ourshack.com">dunedin-isig-cabal@lists.ourshack.com</a>> wrote:<br></p></div><blockquote style="border-top-color:currentcolor;border-top-style:none;border-top-width:medium;border-right-color:currentcolor;border-right-style:none;border-right-width:medium;border-bottom-color:currentcolor;border-bottom-style:none;border-bottom-width:medium;border-image-outset:0;border-image-repeat:stretch;border-image-slice:100%;border-image-source:none;border-image-width:1;border-left-color:rgb(204, 204, 204);border-left-style:solid;border-left-width:1pt;padding-top:0cm;padding-right:0cm;padding-bottom:0cm;padding-left:6pt;margin-left:4.8pt;margin-right:0cm;"><p class="qt-MsoNormal"></p><div>Ideas and comments please, for the September meeting!<br></div><div><br></div><div>I have nothing on the "ready to go" list at the moment. Also I won't be in town for the October meeting, because I'll be at CHCon.<br></div><div><br></div><div>-- <br></div><div> Jim Cheetham<br></div><div> <a href="mailto:jim@cheetham.nz">jim@cheetham.nz</a><br></div><div><br></div><div>_______________________________________________<br></div><div>Dunedin-ISIG-cabal mailing list<br></div><div><a href="mailto:Dunedin-ISIG-cabal@lists.ourshack.com">Dunedin-ISIG-cabal@lists.ourshack.com</a><br></div><div><a href="https://lists.ourshack.com/mailman/listinfo/dunedin-isig-cabal">https://lists.ourshack.com/mailman/listinfo/dunedin-isig-cabal</a><br></div><div>All messages are publicly archived<br></div><p></p></blockquote></div><p class="qt-MsoNormal"></p><div>_______________________________________________<br></div><div>Dunedin-ISIG-cabal mailing list<br></div><div><a href="mailto:Dunedin-ISIG-cabal@lists.ourshack.com">Dunedin-ISIG-cabal@lists.ourshack.com</a><br></div><div><a href="https://lists.ourshack.com/mailman/listinfo/dunedin-isig-cabal">https://lists.ourshack.com/mailman/listinfo/dunedin-isig-cabal</a><br></div><div>All messages are publicly archived<br></div><p></p></blockquote></div></blockquote></div></div><div>_______________________________________________<br></div><div>Dunedin-ISIG-cabal mailing list<br></div><div>Dunedin-ISIG-cabal@lists.ourshack.com<br></div><div>https://lists.ourshack.com/mailman/listinfo/dunedin-isig-cabal<br></div><div>All messages are publicly archived<br></div></blockquote><div><br></div></body></html>