Web Application Firewall. Network Access Control. Intrusion Detection Systems/Intrusion Preventions Systems. Intrinsic Heuristic Detectioneering Devices, this presentation can exploit them all.
The security industry is awash with device strategies attempting to remediate the most prevalent security issues in a single stroke. In fact, some of the biggest names in security are attempting to squeeze as many buzz words into one platform as possible to lure in the unknowing. This tactic gives them the ability to market any product as a must-have for IT and security professionals, while rudimentary security procedures are routinely overlooked. There is nothing more basic than an admin portal that, due to incompetence or ignorance, has not been fully customized for the application's needs.

Quick Facts: Default Admin Login Portals are enabled on over a ten million websites currently (stats only for /admin and /admin/login.php) There are still portals in wide use on the net that God could get into (Yes, even though he wouldn't be up this late)

Download:
http://archive.org/download/BsidesLasVegas2012/1.2.6GillisJonesTheBadminProjectna-na-NananaNa-na-nananaBadmin.avi

Back to BSides Las Vegas 2012 video list