Hello, welcome to the Tuesday, July 28, 2020 edition of the Sandcent Storm Center's Stormcast.

My name is Johannes Ulrich.

And today I'm recording from Jacksonville, Florida.

First of all, I would like to dedicate today's podcast to Donald Smith.

Don was one of the very first, actually, Sands and Storm Center

handlers. He has worked with us back on the precursor site, Incidence.org, and has been a real

great champion of collaboration and free data exchange within the community.

For example, he did also work on the traffic light protocol

that you may know as one of the standards,

how you label data that you're exchanging with peers.

He has worked in information security probably for something close to 30 years for Quest,

then later for CenturyLink, and most recently for NetSkout.

And it was via his NetSkout colleague Roland Dobbins that last week I learned that Don sadly had passed away.

So I would like to take this opportunity to just remind everybody of the great contribution that Don has provided to make the Internet really a better place and would like to send my thoughts to his

family.

But of course the rest of us still has to continue what Don started to work on and try to make

this internet a better place.

Well, and with that, we do have a post by DDE about analyzing metasploid ASP.net payloads.

Usually, you would use MSF Venom to create these kind of payloads, so you are essentially

giving MSF Venom a reverse TCP, for example, Shell in his example,

and then tell it what port to listen on, what IP address to connect to, and this will spit out

code that can then be used as part of an attack.

...