how to spy with python so easy the NSA can do it
summary
Slides summarize PRISM and XKeyscore and claim those programs mine transit traffic and run federated queries; demonstration code reproduces six concrete queries using Python and common libs and it works on sample pcaps. Tools shown are Scapy, Pygeoip and Python Nmap inside IPython/reveal.js. Live examples extract search terms from HTTP, geo‑map route hops, pull SMTP bodies and attachments, detect PGP messages, read IRC plain‑text chats, and scan hosts for service versions; XKeyscore is reported as ~700 servers circa 2008.
AI-written summary · about
chapters (7)
- 0:00Start
- 3:04Historical Context TL;DR: What the NSA is doing with PRISM is nothing new.
- 19:19Show me everyone from $X country that has visited $Y extremist forum
- 21:31Give me all emails with $X in the body of the email
- 23:31Query 4: Give me PGP usage from $Z country
- 25:18Query 5: Show me chats for $X user during $Y timeframe
- 26:29Find all exploitable machines in $Z country
related talks
29mHow to Spy with Python
23mPython for Threat Intelligence
42mUsing Python to Spy on Your Friends: Recon-ng and Open Source Intelligence
14mExplaining PRISM
34mBuild Your First Cyber Forensic Application using Python
30mPython Platforms for Cyber Security
33mCommSec D1 - Faster, Wider, Greater: Modern Pentest Tricks
46mThe Art of Cyber Espionage: Unleashing the Power of SCADA and ICS Hacking