SPLINTER THE RAT ATTACK: CREATE YOUR OWN BOTNET TO EXPLOIT THE NETWORK

No ratings

Presented at HackInParis 2014 by

Solomon Sonya

By now, most people understand the overall concept of botnets and Remote Administration Tools (RAT). But yet many people do not know how to program their own RAT for penetration testing. It is always rewarding to maintain access and establish unhindered command and control (C2) to your zombie machines throughout the penetration test for prolonged periods of time. As security professionals, many of us may turn to well-known and highly capable tools to backdoor systems and allow us unrestricted entry to the victim machines. Although this clearly has its advantages, a drawback is that the chances of detection increase with the popularity of well-known exploit tools. Therefore, this talk is designed to show you the easiest way to evade detection, establish your C2, maintain persistence, exfiltrate data, and launch even greater exploits on the victim box by developing your own botnet yourself and incorporating custom payloads as you progress through the attack.