Infoz Who: Hackers like you. What: ToorCon 9 When: October 19th-21st, 2007 Where: San Diego Convention Center Why: What could possibly go wrong?

Workshops

This year ToorCon is offering 2 exclusive hands-on workshops focused on hardware hacking and and building wireless embedded systems. All workshops include the hardware and tools necessary to participate in the workshop (you just supply the laptop). Pre-registration is now closed but you still have a chance to register at the door. We are also offering a discount when you register for both the workshops and the seminars. Our pricing schedule is listed below:

NOTE: We're starting registration at 9:00am and we'll be providing complementary coffee and breakfast at 9:00-10:00am so everyone will have a chance to mingle and meet each other before the workshops start so please show up early!

- iCal Schedule
- XCal Schedule

Penetrating the Epoxy Curtain: Hands-On Silicon Hacking
Instructors: Bunnie & Christopher Tarnovsky
Dates: Thursday, October 18th, 2007 @ 10:00am
Price: $1,500 or $2,000 \w Seminars
Availability: 1 seat available
Location: Opal Room, The Emerald Plaza Westin
Includes: SLE4442 secure EEPROM chip decapsulated & rebonded onto an 8-pin dip, large format color printout of the chip, a USB key with delayered, hi-res versions of the chip for user use, and printouts for the "hands-on" session.

A core requirement for any security system is the integrity of at least one secret. Keeping this secret truly secret is a notoriously hard problem. Many security system designers look to hardware as the panacea for keeping secrets locked up. Unfortunately, many designers have no choice but to simply trust secure hardware vendors' claims. In this seminar, participants will have their expectations for hardware security calibrated. They will develop a sense for how good (or bad!) hardware security can be through a hands-on exercise reverse engineering a real-world stored value security system (chances are you've used this one!). The key benefit to participants is core knowledge of hardware security, and the questions to ask and things to avoid when attempting to incorporate silicon-based security elements into their overall security architecture.

Prerequisites: No specific knowledge of digital logic or hardware is required; general familiarity with boolean logic (e.g., &&, || operators) is all you will need. The course is targeted at primarily software hackers with a lot of curiosity about hardware, and it starts with a hardware primer to bring everyone up to speed. There will be plenty of open Q&A and discussion time, so hardware hackers already familiar with the basics of chip RE can delve into more sophisticated topics and techniques. Bring a laptop with some image manipulation program (such as GIMP or Photoshop) to help with taking notes.

Building/Hacking Open Source Embedded Wireless Routers
Instructor: Ken Caruso & Matt Westervelt
Dates: Thursday, October 18th, 2007 @ 10:00am
Price: $1,500 or $2,000 \w Seminars
Availability: 5 seats available
Location: Executive Boardroom, The Emerald Plaza Westin
Includes: Soekris AP, Wireless Card, Case, & Antenna

This class will take a very effective approach to teach you the basics of embedded hacking and wireless mesh. First we give you your own embedded wireless box to work on (which you take home at the end of the class). Second we teach you how to bootstrap it with an operating system while keeping it within the 64megabyte space limitation on the device. Third we teach you how to take this platform and make it part of a wireless mesh network using three different Open Source mesh implementations. Fourth we cover security issues with these protocols, how to mitigate and how to take advantage of them.

Before the workshop we will contact the people coming and do a poll on what they would like to get out of it. The plan is to adjust the format so everyone leaves with answers to their questions regarding embedded wireless systems. What would you do if you had a Soekris box and a day with some embedded wireless ninjas?

Crash Course in Penetration Testing
Instructor: Joseph McCray & Chris Gates
Dates: Thursday, October 18th, 2007 @ 10:00am
Price: $1,500 or $2,000 \w Seminars
Availability: 1 seat available
Location: Diamond II Room, The Emerald Plaza Westin
Includes: 250GB 2.5" USB Harddrive preloaded with rootwars VMWare images

This course will start with the basics of pen-testing methodology covering Footprinting, Scanning, Enumeration, and Exploitation which will cover attacking Web Apps, Buffer Overflows, and will set you loose on a set of rootwars challenge servers. The course will come with a complementary USB Harddrive loaded with an attack VM and challenge VM images for you to play with so you can continue to hone your skills and learn new techniques even after the course is finished. Attendees will walk away with a working knowledge of how to pen-test a network, all of the basic tools needed, and a set of exercises that they can use to improve their skills.