Keeping It Open Source with Metasploit’s HD Moore
Hacker Valley Studio15 Syys 2022

Keeping It Open Source with Metasploit’s HD Moore

This season of Hacker Valley Red wraps up with another interview of an incredible offensive cybersecurity legend. Known first and foremost for his work founding Metasploit and his recent work co-founding Rumble, HD Moore joins the show this week to hear about his journey from spiteful hacker to successful founder. HD walks through the history of Metasploit, the motivation behind their coding decisions, his opinions on open source software, and the excitement of exploration and discovery.

Timecoded Guide:

[04:57] Catching up with HD’s career from his hacking exploits in the ‘90s through his founding of Metasploit to his recent activities with Rumble

[11:41] Getting personal with the feelings and takeaways from a project as successful and impactful on the cyber industry as Metasploit

[18:52] Explaining HD’s personal philosophies around accessible education and the risk of sharing vulnerable information publicly

[25:39] Diving deep into the technical stories of HD’s path of discovery and exploration during his time at Metasploit

[31:14] Giving advice for future founders and hackers looking to make a legendary impact on the cybersecurity community

Sponsor Links:

Thank you to our sponsors Axonius and PlexTrac for bringing this season of HVR to life!

Life is complex. But it’s not about avoiding challenges or fearing failure. Just ask Simone Biles — the greatest gymnast of all time. Want to learn more about how Simone controls complexity? Watch her video at axonius.com/simone

PlexTrac is pleased to offer an exclusive Red Team Content Bundle for Hacker Valley listeners. This bundle contains both our "Writing a Killer Penetration Test Report" and "Effective Purple Teaming" white papers in ONE awesome package. Head to PlexTrac.com/HackerValley to learn more about the platform and get your copy today!

What were some of the trials, tribulations, and successes of Metasploit?

Although Metasploit has had a lasting impact on the cyber world, HD Moore is not afraid to admit that part of Metasploit existed out of spite for critics, employers, and gatekeepers in the cybersecurity industry. In terms of trials and tribulations, HD saw a great deal of criticism come from his peers and from professionals ahead of him in the industry, often displaying rudeness towards the quality of the exploits and Metasploit’s audience of young hackers. Later, HD says that a surprising and amusing side effect of his success with the project was watching employers and peers go from criticizing to lifting up his work with Metasploit and attributing success of many hacking professionals to its creation.

“When we started the Metasploit project, we really wanted to open up to everybody. We wanted to make sure that, even if you barely knew how to program, you can still contribute something to Metasploit. So, we did our best to make it really easy for folks to get in touch with us, to submit code.”

Where does your philosophy land today on giving information freely?

HD has heard the same opinions many professionals that teach and give information freely have heard: “You’re making it easier for people to use this information the wrong way.” Instead of considering the worst possible outcomes of making hacking accessible, HD chooses to acknowledge the importance of accessible education and publicly provided information. According to HD, if someone is creating and teaching content to the next generation of red teamers, that content is theirs to use. Whether they’re a physical pen tester teaching lock picking or a hacker disclosing a vulnerability, what they choose to share with others has to be based on personal moral code and what others do with that information is up to them.

“It comes down to: You do the work, you own the result. If you're teaching people how to do stuff, great, they can do what they want. You can decide to do that, you can decide not to do that, but it's your decision to spend your time training people or not training them.”

Is it possible to be a CEO, or a co-founder, and stay technical?

The downside of success in the cybersecurity industry is often stereotyped as losing the opportunity to be a hands-on hacker. However, for HD, his success has allowed him to do the exact opposite and instead prioritize his time to be technical. HD believes strongly in the ability to make this happen through proper delegation of duties, incorporating new leaders and managers in your company or project, and acknowledging when you may need the help to bring what you’re working on to the next level. HD is proud of his success with Metasploit and Rumble, and is happy that he was able to hand off certain duties to other professionals that he knew would do better if they had a chance in the founder’s shoes.

“Don't let the growth of your company change what you enjoy about your work. That's really the big thing there, and there's lots of ways you can get there. You can hire folks to help out, you can promote your co-founder to CEO. You can bring on program managers or project managers to help with all the day to day stuff."

What advice do you have for people looking to follow a similar cyber career path?

Content is the name of the game, especially when you’re looking to get more eyes on what you do. HD is the first to admit that putting himself out there in a blog post, on a podcast, or at a stage show is not always a walk in the park, taking him out of his comfort zone and often away from the tech that he spends his time on. However, publicly displaying himself and his work has brought attention to Rumble and Metasploit, and HD knows he would not have achieved this level of success without putting his content out into the world, hearing feedback from his peers, and even receiving his fair share of criticism from industry professionals.

“Not all of it is the most fun thing to do all the time, but it is crucially important, not just for growing yourself and getting out there and getting feedback from your peers, but for learning because you learn so much from the feedback you get from that effort.”

-----------

Links:

Stay in touch with HD Moore on LinkedIn, Twitter, and his website.

Learn more about Rumble, Inc on LinkedIn and the Rumble website.

Keep up with Hacker Valley on our website, LinkedIn, Instagram, and Twitter.

Follow Ron Eddings on Twitter and LinkedIn

Catch up with Chris Cochran on Twitter and LinkedIn

Continue the conversation by joining our Discord

Jaksot(406)

Adversarial AI: Navigating the Cybersecurity Landscape

Adversarial AI: Navigating the Cybersecurity Landscape

In this episode, host Ron Eddings is joined by Sr. Director of Red Team Operations at Coalfire, Pete Deros, to discuss the hottest topic around; adversarial AI. Ron and Pete discuss how AI is used and how the adversary is using AI so everyone can stay one step ahead of them as well. Impactful Moments 00:00 - Welcome 01:35 - Introducing Pete Deros 03:30 - More Easily Phished 05:09 - 11 Labs Video 06:42 - Is this AI or LLM? 9:18 - AI or LLMs: Who has the Speed? 10:36 - Fine Tuning LLMs 14:37 - WormGPT & Hallucinations 17:01 - LLMs Changing Second to Second 18:38 - A Word From Our Sponsor 20:19 - ‘Write me Ransomware!' 23:24 - Working Around AI Roadblocks 28:00 - “Undetectable for A Human” 31:58 - Pete Can Help You Floss! 34:56 - OWASP Top 10 & Resources 37:00 - Check out Coalfire   Links: Connect with our guest Pete Deros: https://www.linkedin.com/in/pete-deros-94524b9a/ Coalfire’s Website: https://www.coalfire.com/ Coalfire Securialities Report: https://www.coalfire.com/insights/resources/reports/securealities-report-2023-compliance OWASP Top 10 LLM: https://owasp.org/www-project-top-10-for-large-language-model-applications/ Join our creative mastermind and stand out as a cybersecurity professional: https://www.patreon.com/hackervalleystudio Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/ Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord

7 Marras 202339min

Protecting What You Can’t See with HD Moore

Protecting What You Can’t See with HD Moore

In this episode, host Ron Eddings is joined by Metasploit creator, co-founder and CEO of runZero, HD Moore. HD changed the world with Metasploit and he’s doing it again with runZero. Attack Surface Management can’t happen unless you have visibility into your home or company network and HD shares how he’s able to deliver that and so much more in his journey of creating runZero. Impactful Moments 00:00 - Welcome 00:50 - Introducing guest, HD Moore 01:30 - Fixing the Root Cause 05:00 - runZero 10:54 - A New Kind of CAASM 12:00 - Uncover the Unknown 14:08 - runZero Raving 17:45 - “Trust me, you can scan OT” 20:10 - You Can Scan if You Want To 22:30 - Red to Blue Judo Skills Links: Connect with our guest HD Moore: https://www.linkedin.com/in/hdmoore/ Check out runZero: https://www.runzero.com/ Join our creative mastermind and stand out as a cybersecurity professional: https://www.patreon.com/hackervalleys... Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/ Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord

31 Loka 202324min

Penetration Testing, Public Speaking, and Content Creation with Phillip Wylie

Penetration Testing, Public Speaking, and Content Creation with Phillip Wylie

In this episode, Ron Eddings is joined by Penetration Tester, Instructor, International Speaker, Best Selling Author, and Podcast Host, Phillip Wylie. Phillip shares how pen testing and the need to educate people helped motivate him to speak at conferences and become a central voice in the cyber community. But more than that, he explains how he’s helped so many people get started on a similar path.   Impactful Moments: 00:00 - Intro 00:50 - Introducing Phillip Wylie 02:10 - Penetration testing Started it All 05:10 - Pen testing is a Job?! 08:50 - The Conference Game 12:55 - Cheers to Toastmasters 14:23 - Content Creation & Social Media Marketing 18:30 - Keeping it Simple 20:55 - Are you Smarter Than a 5th Grader? 25:30 - What’s next for Phillip? 26:35 - Getting into Creating   Links: Connect with our guest Phillip Wylie: https://www.linkedin.com/in/phillipwylie/ Phillip’s Book “The Pentester Blueprint”: https://www.amazon.com/Pentester-BluePrint-Your-Guide-Being/dp/1119684307/ref=asc_df_1119684307 Phillip’s Podcasts: https://www.thehackermaker.com/phillip-wylie-show/ Check out our Previous Episode with Phillip: https://www.axonius.com/plus/hacker-valley-on-the-road/on-the-road-at-bh-2022/phillip-wylie Join our creative mastermind and stand out as a cybersecurity professional: https://www.patreon.com/hackervalleystudio Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/ Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord

24 Loka 202330min

Ruse and Deception: From Hollywood to Corporate Espionage with Robert Kerbeck

Ruse and Deception: From Hollywood to Corporate Espionage with Robert Kerbeck

In this episode, Host Ron Eddings interviews Robert Kerbeck, author of Ruse: Lying the American Dream from Hollywood to Wall Street. Robert shares how his professional acting skills helped his career in corporate spying and espionage.   Impactful Moments 00:00 - Welcome 00:46 - Introducing guest, Robert Kerbeck 00:55 - …And That’s How I Became A Spy 03:00 - Creativity REELY Counts w/ Phishing 10:00 - Robert’s Phishing Training 14:22 - How Corporate Espionage Works 18:36 - “A Fraction of the Spying I Really Did” 20:52 - Hobnobbing with Hollywood 25:06 - Your Way out of a “Ruse”    Links: Connect with our guest Robert Kerbeck: https://www.linkedin.com/in/robert-kerbeck-12aa7a11/ Read “Ruse: Lying the American Dream from Hollywood to Wall Street”: https://www.amazon.com/Ruse-Lying-American-Hollywood-Street/dp/1586423169 Join our creative mastermind and stand out as a cybersecurity professional:  https://www.patreon.com/hackervalleystudio Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/ Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com/ Continue the conversation by joining our Discord: https://hackervalley.com/discord

17 Loka 202328min

Hacker Culture and ADHD with Kim Crawley

Hacker Culture and ADHD with Kim Crawley

In this episode, host Ron Eddings is joined by cybersecurity researcher and writer, Kim Crawley, to deep dive into one of her greatest passions; computing! From its origins to its newest capabilities in quantum and AI, Kim shares her love of computers as well as her passion for educating others through her writing. Lastly, Kim explains how she wrote her newest release, “Hacker Culture A-Z” while keeping it ADHD-friendly. Impactful Moments 00:00 - Welcome 00:52 - Introducing guest, Kim Crawley 02:20 - Computers; A Forbidden Fruit 04:50 - Parents, PCs & Printers 10:44 - Why Hacker Culture? 14:34 - Join our Mastermind! 15:16 - Quantifying Quantum 21:53 - ”AI is like Fire” 26:45 - Playing with Chat & DALL-E 28:28 - ADHD & Work 33:22 - How to Become an Author Links: Connect with our guest Kim Crawley: https://linkedin.com/in/kimcrawley Pre-order “Hacker Culture A to Z” here: https://www.amazon.com/Hacker-Culture-Fundamentals-Cybersecurity-Hacking/dp/1098145674/ Read “Hacker Culture A to Z” on the O’Reily Learning Platform: https://www.oreilly.com/library/view/hacker-culture-a/9781098145668/ Join our creative mastermind and stand out as a cybersecurity professional: https://www.patreon.com/hackervalleystudio  Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/ Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord

10 Loka 202337min

Starting at the Endpoint with Danny Jenkins

Starting at the Endpoint with Danny Jenkins

In this episode, host Ron Eddings is joined by Co-Founder and CEO of ThreatLocker, Danny Jenkins, to talk about his "Hero’s Journey" from IT to launching ThreatLocker. From spam emails, bots, and ransomware to persuading people to take a new approach -- this story has all of the villains and obstacles any cybersecurity champion will inevitably face and conquer! Sponsor: Get unprecedented visibility and control of your cybersecurity, quickly, easily, and cost-effectively. Check out our friends at ThreatLocker today and let them know Hacker Valley sent you! https://www.threatlocker.com  Impactful Moments 00:00 - Welcome 00:55 - Introducing guest, Danny Jenkins 02:00 - The start of Danny’s journey 04:10 - Moments it changed 06:55 - The worst job in the world 08:36 - Starting with the endpoint 09:18 - An uphill battle 13:25 - Going all in 15:21 - A word about our sponsor! 16:35 - Zero to hero 18:47 - Trust and ringfencing 22:53 - What is zero trust? 25:00 - Zero trust at ThreatLocker 28:25 - Tools to make decisions 29:09 - Productivity tools? Not anymore! 31:10 - Making yourself more secure Links: Connect with our guest Danny Jenkins: https://www.linkedin.com/in/dannyjenkinscyber/ Learn more about ThreatLocker: https://www.ThreatLocker.com Join our creative mastermind and stand out as a cybersecurity professional: https://www.patreon.com/hackervalleystudio Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/ Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com/ Continue the conversation by joining our Discord: https://hackervalley.com/discord

3 Loka 202333min

Having Resilience In Your Cyber Career with Erika Eakins

Having Resilience In Your Cyber Career with Erika Eakins

In this episode, host Chris is joined by Erika Eakins — a cybersecurity sales ninja, podcaster, and co-founder at Teach Kids Tech. Erika opens up about her challenges entering tech and cybersecurity as a woman and her mission to serve the underrepresented. Erika also shares how the strength and resilience she acquired in childhood have helped to carry her through unexpected hardships in the industry like layoffs. Impactful Moments: 0:00-Welcome 00:50-Introducing guest, Erika Eakins 01:22-Erika’s origin story 05:43-Being judged on looks 07:10-”Why are you still in?!” 07:47-Where to find strength 10:40-Who are the Cyber Queens? 13:18-Join our mastermind! 14:02-Aiming to Overcome Obstacles 16:08-Reflection on Resilience 17:54-Teach Kids Tech 20:30-The legacy of Queens 23:23-Power of Positivity & Support Links: Connect with our guest Erika Eakins https://www.linkedin.com/in/eeakins/ Check out The Cyber Queens Podcast https://www.cyberqueenspodcast.com/ Learn more about Teach Kids Tech https://www.teachkidstech.net/ Join our creative mastermind and stand out as a cybersecurity professional: https://www.patreon.com/hackervalleystudio Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/ Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com/ Continue the conversation by joining our Discord: https://hackervalley.com/discord

26 Syys 202325min

Build vs. Buy: The Classic Technologist Conundrum

Build vs. Buy: The Classic Technologist Conundrum

It’s a classic technologist conundrum: Should I build or buy the solution I need to solve a problem? The “Build vs. Buy” conundrum is faced by technology teams worldwide. To help approach this riddle, Chris Cochran speaks to two industry veterans, Slavik Markovich co-founder & CEO of Descope, and Rob Fry, co-founder of AKA Identity.  Whether you’re an entrepreneur, a CTO, or just tech-curious, this episode offers invaluable insights. Using the identity market as a case study, we’ll explore the multifaceted considerations needed to make the best choice for your team and organization.   Impactful Moments: 0:00 - Build vs. Buy: The Classic Technologist Conundrum 0:37 - Show Intro 0:57 - Introducing Slavik Markovich and Rob Fry 3:25 - Previous build vs. buy project 6:44 - Decision logic for build vs. buy  15:09 - How does tech sway your decision making? 19:44 - How does data impact decision making? 24:31 - How do processes influence decision making? 29:13 - Maintaining custom tech solutions over time 33:28 - Tenants for building a tech company 41:06 - Build authentication and user journey flows with Descope   Links:  Learn more about Descope: https://www.descope.com/ Connect with our guest Slavik Markovich: https://www.linkedin.com/in/slavikm/ Connect with our guest Rob Fry: https://www.linkedin.com/in/fry-rob-g/ Join our creative mastermind and stand out as a cybersecurity professional: https://www.patreon.com/hackervalleystudio Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/ Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord

19 Syys 202343min

Suosittua kategoriassa Koulutus

rss-murhan-anatomia
psykopodiaa-podcast
voi-hyvin-meditaatiot-2
jari-sarasvuo-podcast
aloita-meditaatio
rss-duodecim-lehti
rss-psykalab
psykologia
rss-vapaudu-voimaasi
rss-niinku-asia-on
ihminen-tavattavissa-tommy-hellsten-instituutti
rss-narsisti
adhd-podi
rss-liian-kuuma-peruna
uskonnon-pitka-oppimaara
aamukahvilla
kesken
rss-valo-minussa-2
rss-monarch-talk-with-alexandra-alexis
rss-anteeks-etukateen