Core, Sdi, Inc.

Core Security Technologies

Help/systems, LLC

Gerardo Gabriel Richarte

Luciano Notarfrancesco

Ricardo Quesada

Bruce Leidl

Gustavo Ajzenman

Javier Burroni

Agustin Azubel Friedman

Ariel Futoransky

Carlos Emilio Sarraute Yamada

Jorge Lucangeli Obes

Maximiliano Gerardo Caceres

Gabriel Becedillas

Oliver Friederichs

Oliver Friedrichs

Ariel Waissbein

Diego Bartolome Tiscornia

Hector Adrian Manrique

Fernando Federico Russ

Eduardo Arias

Maximiliano Gabriel Caceres

Gabriel Martin Becedillas Ruiz

Alberto Gustavo Soliño Testa

Diego Martin Kelyacoubian

Axel Elián Brzostowski

Sebastian Pablo Cufre

Javier Ricardo De Acha Campos

Augustin Azubel Friedman

Alberto Gustavo Solino Testa

Diego Marin Kelyacoubian

Axel Elian Brzostowski

A system and method for extending automated penetration testing of a target network is provided. The method comprises: computing a scenario, comprises the steps of: translating a workspace having at least one target computer in the target network, to a planning definition language, translating penetration modules available in a penetration testing framework to a planning definition language, and defining a goal in the target network and translating the goal into a planning definition language; building a knowledge database with information regarding the target network, properties of hosts in the network, parameters and running history of modules in the penetration testing framework; and running an attack plan solver module, comprising: running an attack planner using the scenario as input, to produce at least one attack plan that achieves the goal, and executing actions defined in the at least one attack plan against the target network from the penetration testing framework.

System and method for extending automated penetration testing to develop an intelligent and cost efficient security strategy

A system and method for automated probabilistic planning of network attacks against infrastructures of computer networks and applications is provided. The embodiments automate the analysis and probabilistic planning of multi-step attacks to computer and application networks (in particular in the context of automating penetration tests), optimizing with respect to one of the following metrics: the probability of success of the actions, a numerical parameter that must be minimized (e.g., running time), or the number of logs generated by the control devices in the target network.

System and method for probabilistic attack planning

A system and method provide application penetration testing. The system contains logic configured to find at least one vulnerability in the application so as to gain access to data associated with the application, logic configured to confirm the vulnerability and determine if the application can be compromised, and logic configured to compromise and analyze the application by extracting or manipulating data from a database associated with the application. In addition, the method provides for penetration testing of a target by: receiving at least one confirmed vulnerability of the target; receiving a method for compromising the confirmed vulnerability of the target; installing a network agent on the target in accordance with the method, wherein the network agent allows a penetration tester to execute arbitrary operating system commands on the target; and executing the arbitrary operating system commands on the target to analyze risk to which the target may be exposed.

System and method for providing application penetration testing

A system is provided for performing penetration testing of a target computer network by installing a remote agent in the target computer network. The system includes a local agent provided in a computer console and configured to receive and execute commands. A user interface is provided in the console and configured to send commands to and receive information from the local agent, process the information, and present the processed information. A database is configured to store the information received from the local agent. A network interface is connected to the local agent and configured to communicate with the remote agent installed in the target computer network via a network. Security vulnerability exploitation modules are provided for execution by the local agent and/or the remote agent.

Automated computer system security compromise

A system is provided for executing a system call originating in a local computer on a first remote computer connected to the local computer via a network. Communication is established between the local computer and the first remote computer via the network. A syscall server is installed in the first remote computer. A reference address is sent from the first remote computer to the local computer via the network through execution of code by the syscall server. A syscall request is built in the local computer with arguments determined using the reference address received from the first remote computer. The syscall request is sent from the local computer to the first remote computer via the network. The syscall request is copied into a stack of the first remote computer through execution of code by the syscall server. Registers are popped from the syscall request in the stack. Execution of a syscall request is initiated on the first remote computer. The result of the syscall request is pushed onto the stack. At least a portion of the result of the syscall request is sent to the local computer via the network through execution of code by the syscall server.

Distributed computing using syscall proxying

Growing community of inventors

Buenos Aires, Argentina

Gerardo Gabriel Richarte