Applications rely on generating random numbers to provide security, and fail catastrophically when these numbers turn out to be not so “random.” For penetration testers, however, the ability to exploit these systems has always been just out of reach. To solve this problem, we've created “untwister:” an attack tool for breaking insecure random number generators and recovering the initial seed.

Dan Petro and Joe DeMesy will be presenting at BsidesLV – Untwisting The Mersenne Twister: How I Killed The PRNG.