I See You: Wall of Sheep Credential Harvesting Analysis
Brian Wohlwinder and Andrew Beard analyze cleartext credentials captured at the Wall of Sheep, highlighting apps that continuously leak sensitive data.
Summary
Telemetry from the Wall of Sheep Captures
Every year at DEF CON, the Wall of Sheep monitors conference network traffic to highlight apps and protocols that transmit unencrypted user credentials.
Deconstructing Insecure Applications and Protocols
Brian Wohlwinder and Andrew Beard dissect captured PCAPs, revealing that email clients, legacy game services, and mobile apps transmit passwords in plaintext.
Statistical Breakdown of Protocol Leaks
The speakers present statistics on the most frequently leaked authentication protocols—including POP3, IMAP, Telnet, and insecure HTTP authentication.
Educating Users and Enforcing Encryption
The authors advocate for mandatory Transport Layer Security (TLS) across all client software and demonstrate secure VPN configurations.
Related talks
Village Presentations·18 min
Ming Chow
Ming Chow demonstrates packet capture tools and real-time credential carving techniques used by shepherds at DEF CON's famous Wall of Sheep.
Main Stage·11 min
Riverside
Riverside shares humorous and educational stories behind cleartext credential captures from the Wall of Sheep, demonstrating essential operational security.
nullcon·19 min
Industry experts analyze emerging threats surrounding Goa 2013_BYOD How will IT shape your wireless network security in future by Kiran Deshpande.