Modern Red Team Immersion Bootcamp, Condensed

No ratings

Presented at BSidesSanFrancisco 2018 by

The Modern Red Team Immersion Bootcamp is designed to expose students to the types of attacks that long term persistent Red Teams have deployed against modern organizations. This is a condensed version of a two day course. In this workshop we will focus on post exploitation, lateral movement, and escalation techniques within modern environments comprised of OSX, Linux, Continuous Integration Systems, and elastic compute services.Requirements: Some familiarity with basic penetration testing concepts will be helpful, but is not absolutely required. Proficiency using a command line and search engine in conjunction to solve problems is highly recommended to enjoy the class. Access to both an OSX and Linux laptop or virtual machine with internet connection is required to access labs and complete course content. The recommended setup is an OSX laptop with a Kali or Ubuntu Virtual Machine. If you are unable to meet this requirement you can still take and enjoy the class but please be advised that approximately 20% of the course’s hands-on lab content will require a Mac OS system. It is advised to have VMWare Fusion or VMWare Workstation installed in advance.Outline: Perimeter BreachPublic Credential Reuse TricksTargeted Social Engineering and Spear PhishingSocial / PhysicalMalware ConsiderationsEscalationPost Exploitation 101Userland Password Stealing TechniquesApplication Secret Stealing Techniques2FA Bypass TechniquesAWS Post ExploitationLateral MovementLateral Movement Path VisualizationCredential Harvesting TechniquesPiggybacking Users to Bypass 2FATunneling and ProxyingContinuous Dis-integration TechniquesPersistenceLive Fire Persistence