Getting Access with Spear Phishing

No ratings

Presented at CarolinaCon14 2018 by

Spear phishing accounts for the vast majority of security breaches. Being able to perform spear phishing is vital for a penetration tester and integral to understanding how to mitigate it.This presentation will focus on the entire process of a sophisticated spear phishing campaign, from recon to delivering the payload and bypassing modern defenses. Furthermore, stealth and anti-blue team techniques will be demonstrated. I will also demonstrate HunterGatherer.js, an email gathering and validation tool I wrote to assist in spear phishing."