Главная
Study mode:
on
1
Introduction
2
Requirements
3
Demo
4
Stack Overflow
5
PowerShell Demo
6
War Document Demo
7
User Info Demo
8
Wireless History Demo
9
Stealing Documents
10
Dumping the elses
11
Passwords
12
Password Vault
13
Find Password Vault
14
Live Demo
Description:
Explore innovative data exfiltration techniques in this 48-minute LASCON conference talk. Delve into the world of stealthy attacker methods that leverage seemingly innocuous system components to hide malicious activities. Learn how attackers can exploit normal-looking files, legitimate software, and common system objects to establish covert communication channels and exfiltrate sensitive data. Discover techniques involving Symantec virus definition files, Wikipedia-based command and control, Word dictionary files, Outlook email headers, and more. Examine various hiding spots, including prefetch files, Search Index, event logs, Recent Documents, free disk space, and Excel templates. Gain insights into detecting these subtle attack vectors and understand why traditional monitoring methods may overlook such threats. Through live demonstrations and practical examples, enhance your understanding of advanced data exfiltration techniques and improve your ability to defend against sophisticated cyber attacks. Read more

Abusing Normality - Data Exfiltration in Plain Site

LASCON
Add to list
0:00 / 0:00