Home | Crew | Podcasts | Contact | Forums | Guest | Weekly Contest | RSS | Syngress Publishing

Welcome to SploitCast, the podcast for hackers, geeks, and the security paranoid. We are a group of students and IT professionals that have decided to start a downloadable talk show. SploitCast will discuss a wide variety of topics; these include, but are not limited to, new vulnerabilities, exploit code, security and technology news, and possibly even cute little bunny rabbits (but don't hold your breath). The SploitCast crew will also be conducting interviews and round table discussions with other members of the security industry.

We hope that you enjoy what you hear, and look forward to your feedback. This will be a community driven talk show. Please contact us and let us know what you like and dislike. We want to make this show as enjoyable as possible, and we cannot do that without the interaction and support of those who listen to our show. Many goodies will be coming to this website soon; so on those lonely nights, or dull days at work, come back to our site and feel the warmth of those who are as paranoid about your security as you are.

We have a WINNER for the 1-05-07 Syngress Weekly Contest. Congratulations max302, w00t!

January 5, 2007

It's that time again! We're taking it easy this week, check out our Syngress Weekly Contest and check out Syngress Publishing. Good Luck!

December 31, 2006

Congratulations to the 12-29-06 Syngress Weekly Contest winner Resident_Geek, w00t.

December 29, 2006

It's Friday again! Check out our Syngress Weekly Contest on the Weekly Contest page, sponsored by Syngress Publishing. Good Luck! Thank you Matt and LEH.

December 24, 2006

Well, it's about that time....so here is your SploitCast Christmas special. Thanks to Matt :) Merry Christmas from the crew at SploitCast.

Sploitcast Christmas Special

December 23, 2006

We have a "Winner" for the 12-22-06 contest. Congratulations A3n! Also, congratulations to Cd-MaN who finished a close second and kuza55 who was right on his heels in third. We've said it before, we have the l337est listeners in the world.

December 23, 2006

Matt and Walcy do a roundtable discussion on some hot topics in security including the unpatched M$ word exploits floating around. They also discuss some holiday gifts for hacker friends (okay, it's sort of a joke) and the upcoming Shmoocon event. In addition, the new contest is announced!

Sploitcast Episode #18

December 16, 2006

Niels Teusink is the winner of our first Syngress "Weekly" Contest sponsored by Syngress Publishing. Congratulations Niels! Thanks to everyone who played and "Good Luck" with next weeks contest! We'll post the answer on the forums contest thread next week.

December 14, 2006

We are very excited to announce our new Syngress "Weekly" Contest sponsored by Syngress Publishing. Every week you can test your skills on a new contest and the best part is the prizes! The winner gets to choose a Syngress book of their choice. Yes, any book that Syngress Publishing currently has in stock! No kidding. So check out our contest link and check out www.syngress.com. Let the games begin.

Friday, December 8, 2006

Matt and a guest report on the DNS Con hacker conference in the UK.

Sploitcast Episode #17

Monday, November 27, 2006

The newest member of the crew Matt interviews Dino Dai Zovi, discussing the fascinating topic of VM rootkits, OS X security, how to trick wifi clients, disclosure issues, and Microsoft security.

Sploitcast Episode #16

Wednesday, November 15, 2006

Congratulations! Dane Kenney better known as Dakiel is the winner of SploitCast contest #004. His autographed copy of Brian Contos book Enemy At The Water Cooler, Real Life Stories of Insider Threats and Enterprise Security Management Countermeasures is in the mail! The interview with Dino Dai Zovi has been recorded and is in editing. Check it out and meet the newest SploitCast member who is conducting the interview from across the pond. We will be releasing it any day. We also have an upcoming roundtable discussion with the SC crew and an interview with Adam Laurie.

Thursday, November 2, 2006

We are excited to announce an upcoming interview with Dino Dai Zovi to discuss his work with Hardware VM Rootkits, SAP, Hacking Mac OSX, and more! Also check out the forums contest thread for the announcement of our next contest (Sunday). The winner's prize is an autographed copy of Brian Contos book Enemy At The Water Cooler, Real Life Stories of Insider Threats and Enterprise Security Management Countermeasures.

Monday, September 25, 2006

Walcy, Ross, and Kim have put together a special SploitCast video discussing and demonstrating the basics of safe cracking. The safe being used is a very popular safe among hotels, so it serves as a good intro to the topic. This is not an official SploitCast episode release, but rather a special treat to the listeners. SploitCast may or may not release video content in the future, but don't expect it. More information can be found on the show notes in our forums. The video can be downloaded from the links below, it's a good idea to right-click --> save as the files. Choose your preferred format:

M4V | AVI | WMV

Sunday, September 17, 2006

Interview with Johnny Long. Huge thanks to Johnny for not only recording once, but recording twice after we realized that the initial recording session resulted in some audio flaws.

Sploitcast Episode #15

Wednesday, September 13, 2006

The votes are in and the winners are... of the poll vote; t0rch, SploitCast-Because Knowledge Is Your Last Defense. The crew vote ended in a tie and the winners are; dJOEk, Sploitcast: Did you remember to lock the backdoor? And Dakiel, SploitCast - Getting to the r00t of the problem. Congratulations winners! Thanks to everyone who participated and a Big Thanks to DIFRWear for hooking us up with RFID Faraday shielding leather wallets for contest prizes.

Tuesday, September 5, 2006

We've got a winner! In fact two, it was a tie. Congratulations to Ben and Walcy for submitting the the correct answer. In the preface of each of his books and on his website, computer scientist Donald Knuth offers to cheerfully pay a reward of "$2.56" (USD) to the first finder of each error, whether it be technical, typographical, or historical. Knuth explains that $2.56, or 256 cents, correspond to one hexadecimal dollar. Valuable suggestions are worth 32¢.

Monday, September 4, 2006

It's worth 256 cents if you're the first. The first person to email the correct explanation of what this is (what we mean that is, the details) will win a DIRFWear leather Faraday blocking wallet. Send your answers to sploitcast@gmail.com. Good Luck!

Sunday, August 27, 2006

Earlier this evening we released the interview with Johnny Long, however it had some rough editing problems due to a device failure during the interview. Johnny has informed us that he is willing to redo the interview, and therefore we can do a better recording, so we yanked the episode down. We will keep you posted :) Sorry about the trouble

Sunday, August 13, 2006

Old school SploitCast style. We discuss security news and some hot topics; including crafty new trojans that use ping tunneling to transfer data to an attacker, offensive computing, sensative data on stolen laptops, and more. Roundtable discussion with Rob, Kim, Walcy, and Harrison. Big thanks go to DIFRwear for hooking us up with some of their RFID blocking wallets to give away as prizes for our upcoming contests.

Sploitcast Episode #14

Sunday, July 31, 2006

ZOMG!11 teh H.O.P.E!!

Sploitcast Episode #13

Sunday, July 16, 2006

In this episode of SploitCast, joined by Brian Contos, we discuss insider threats and announce the new contest.

Sploitcast Episode #12

Monday, July 03, 2006

Congratulations to TomB for winning the first SploitCast contest. He successfully decrypted the substitution cipher and submitted the plaintext as well as the corrosponding cipher alphabet to us to win a signed copy of Lance James' book Phishing Exposed. For more information on the tools he used to crack the ciphertext, check out the contest thread on the forums.

Saturday, July 01, 2006

A few quick announcements, including our current contest, and a new release schedule!

Sploitcast Episode #11

Friday, June 23, 2006

We are joined by Phil Zimmermann to discuss his new product Zfone.

Sploitcast Episode #10

Thursday, June 15, 2006

The forums are up! Whew. What else needs to be said? Oh yeah, the interview with Zimmermann is coming soon....very soon!

Tuesday, June 06, 2006

The interview with Philip Zimmermann has been conducted and partially edited. We are working on finishing up the editing process and we will release the episode! We would like to thank Phil Zimmermann very much. You can check out his website at www.philzimmermann.com and give Zfone a try.

Saturday, April 29, 2006

We are happy to announce that the SploitCast crew will be conducting an interview with Philip Zimmermann to discuss his recent work in developing Zfone, a program for encrypting VoIP calls. We are very excited about this interview, and look forward to hearing what Phil has to say to our questions. Following the release of the interview with Zimmermann, we will also be releasing a very short episode to discuss some of the exciting new developments in SploitCast, including a contest that has some pretty cool prizes (well, we think they are cool)! So keep checking back, and as always, we love hearing your feedback.

Friday, April 28, 2006

We are joined by Melanie Rieback to discuss RFID security. We had a great time talking about the RFID guardian project, among other research that she has worked on.

Sploitcast Episode #9

Wednesday, April 19, 2006

Well, as you probably well know, SploitCast has never been one for release dates. However, the interview with Melanie Rieback has been recorded and was a lot of fun. Melanie has lots of interesting things to say about the security (or, insecurity) of RFID tags. If you haven't subscribed to our RSS, keep checking back for updates and the release of the interview with Melanie Rieback. We also will be announcing some SploitCast contests in the next week or so!

Friday, April 14, 2006

The interview with Victor Oppleman can be found here. We discuss high level ISP hacks, including such topics as IP prefix hacking and complex routing procedures. We also discuss some interesting security solutions such as darknets. Check out his new book "Extreme Exploits".

Sploitcast Episode #8

Friday, April 7, 2006

The interview with Victor Oppleman was absolutely wonderful, and if all goes as planned the episode should be out in the next day or so! Victor had a lot of great information and had no problems getting down and dirty with the technical aspects of our discussion. We will be interviewing Melanie Rieback, of the RFID Guardian Project, very soon and we are very excited about it! Her work with RFID vulnerabilities has been featured on Slashdot and CNN among many other news sources, and we are thrilled to having her on the show. Look forward to episode eight and nine coming out very soon! Also, we know that we've been promising this for quite a while now, but the forums should be back online soon...hopefully.

Monday, April 3, 2006

Okay, okay, so it was an April Fools joke. But sometimes we worry about talking negatively towards people like phishers, you never know what they will do! Anyhow, lots of good stuff is coming soon, so we wanted to give you guys a heads up so you don't think we've dissapeared forever. This afternoon we will be interviewing Victor Oppleman (more information can be found in our "upcoming guest" section) and the recording should be released by the end of the week if all goes as planned. We also have two other guests that we will be interviewing in the upcoming weeks, and we are very excited about those as well. As soon as we can, we'll release more information about our other guests on the "upcoming guest" page as well. We also will be announcing a SploitCast contest in the next episode, so keep tuned, we think it will be a lot of fun!

Saturday, April 1, 2006

This morning we recieved our first law suit. It was only a matter of time before it finally happened, and now it looks like the future of SploitCast hangs in the balance of our upcoming court case. Apparently a particular phishing group being run in China, under the name of "phisherzRus" took offense to the last SploitCast episode in which we interviewed phishing and malware expert Lance James. They are sueing us on the basis of slander, claiming that episode 7 has given phishers a bad name, and consequently is effecting their return on investment. Unfortunately we have no more information at the moment, but we will keep you updated as we are able.

Wednesday, March 1, 2006

Looks like our forums have borked out. Apparently they were working around 9:00 am EST this morning when suddenly they died. As of now, we have not been able to figure out what caused the problem, or how to fix it for that matter. We do know one thing, we will be switching servers tonight, so at some point during the next two days, some of you may experience some trouble accessing the website. It looks like we may have lost a lot of data, and may have to start our forums over again. I cannot say for sure right now what the future will hold for our forums, but we will definitely have an answer in the next day or so. Sorry about this issue, and thanks for your patience and support. We recieved a number of emails today from people letting us know about the problem, thanks to all! On a lighter note, we have lots of great new SploitCast news to tell, including some new firmed up interviews in the near future. We will be releasing another news post to explain all of the goodies soon!

Monday, February 27, 2006

Lance James joins us to discuss various topics including new phishing and malware attacks, countermeasures, and his new book Phishing Exposed.

Sploitcast Episode #7

Tuesday, February 21, 2006

Black Tuesday (Microsoft updates), RSA Conference, phishing sites with valid SSL certs, and much more.

Sploitcast Episode #6

Saturday, February 11, 2006

Google, google, google. As you may notice, this episode is a bit different. We begin by discussing the security behind the Google X-TOKEN, but quickly get off topic. Bare with us though, because despite our rambling, the second half of SploitCast gets back on subject and we do in fact discuss several interesting and funny exploits. The speakers are dJOEK (Kris), Blitzman, Harrison, and Rob.

Sploitcast Episode #5

Friday, February 3, 2006

We have a few quick announcements to make. First, we have a new crew member, Dennis Jackson. You can expect the audio quality of SploitCast to get much better, because we finally have someone that knows how to tackle that stuff. As you all are probably aware, Lance James of Secure Science Corp. will be joining us soon. Please send any questions you have for Lance to sploitcast@gmail.com and we will try to ask Lance as many of them as we can. Also joining us soon is Dan Moniz, who we briefly discussed in episode #003 of SploitCast when referring to his speech at Shmoocon. We are very excited to have both of these guests on the show in upcoming SploitCast episodes, so send your questions to us (Dan Moniz has agreed to user submitted questions as well) and we'll get them organized.

Tuesday, January 24, 2006

We were lucky enough to be joined by Ab3nd. He spoke at Shmoocon 2006, explaining the principals of magnetic card emulation. We loved his presentation so much that we asked him to join SploitCast, and much to our delight he accepted our invitation. SploitCast episode #004 focuses around the dangers of magnetic cards, the methods for emulating them, and their future. We discuss very lightly the topic of RFID as an alternative to the problems created by magnetic cards in such things as credit cards. The speakers in this episode are the wonderful ab3nd, Harrison Holland, and Kim Holland.

Sploitcast Episode #4

Monday, January 17, 2006

This past weekend some of the SploitCast crew attended the security conference Shmoocon. We had a great time and learned a whole lot of cool tricks. None of which involve pulling bunnies out of hats. We met a lot of cool people, and hopefully will be performing some interviews with some of the speakers and people that we met at the conference. We've decided to throw together sort of an off-the wall release discussing the eventful weekend that we had in DC. We recorded throughout the weekend, however due to heavy intoxication, most of the recordings were not edited and may not be released. As always, we hope you enjoy the podcast (in this case, we hope you enjoy us rambling on about our weekend) and we welcome feedback.

Sploitcast Episode #3

Wednesday, January 11, 2006

Earlier this evening, well at this point it was technically last evening, we recorded another wonderful SploitCast session which is now available for download. We discussed several exploits, some of which include the AOL cross-site scripting vulnerability, a Windows embedded font issue, and updates on the WMF exploit. Check it out on our podcasts page.

Sploitcast Episode #2

RSS Feed

Monday, January 9, 2006

SploitCast had a successful release night, and our servers managed to hold out throughout the onslaught of traffic coming from digg and various other news sites. Thanks to everyone that listened, especially those who responded with feedback. We are proud to announce that SploitCast is now available on iTunes. We are currently in the process of debating whether or not to deface our beautiful website with one of those no good one-click subscribe buttons. But as it stands, this podcast can be searched on the iTunes podcast directory, and you can subscribe from there. As a matter of fact, we will go so far as to suggest you do so! Thanks again.

Sunday, January 8, 2006

Looks like our servers are crying the blues right now. Sorry about the RSS feed's lack of response. Thanks for checking the site.

Sunday, January 8, 2006

The first podcast is online and ready for download. We are very excited about this release, and we look forward to hearing feedback from the listeners.

Sploitcast Episode #1

RSS Feed

Sunday, January 8, 2006

The first podcast is online and ready for download. We are very excited about this release, and we look forward to hearing feedback from the listeners. Thanks for checking out SploitCast, you can download the podcast here. If you are interested in the RSS feed you can snag it here.

Monday, January 2, 2006

We finished another recording session this week, and on good schedule for our Sunday evening release. We have plans for the next few segments, but as of now we are not going to release too much information on future segments because of the possibility of certain things falling through. However, most of the SploitCast crew will be at Shmoocon next weekend (Friday the 13th - Sunday the 15th), and we will hopefully be able to get coverage of the event and talk to some of the many smart people that will be there. The recording sessions so far have been going well, and we would like to thank those who have participated (names will be announced shortly before the release on Sunday). It has been quite an effort to get SploitCast up and running, so the help that has been provided so far is greatly appreciated. There are pictures of the recording session with Harrison and Paul available online. They can be found here.

Monday, January 2, 2006

It has been a long time coming, but it's finally here. As was first announced on the techPhile podcast by Jon and Harrison several months back, the first episode of SploitCast will be release on the first week of January 2006. It's taken a lot of time and preparation, but we are very excited to announce that SploitCast will be ready for download on this upcoming Sunday (January 8, 06) evening. We will release more information about the content of podcast #1 later this week. Once again, we are very happy that this project is getting off its feet, and we hope you enjoy it as much as we do.

Sunday, January 1, 2006

A fresh new design. As some of you may have noticed, we stripped down the website so that only the important information is here. Who needs to surf through a million links and poor content to find what they are interested in. Besides, hackers do things quick and dirty. Well, maybe web design just isn't our Forte. Either way, here it is, our new home on the internet. With the release date closing in, massive changes will be made to this website over the next few days, so don't be alarmed if links are broken, or other such problems show up.