Главная
Study mode:
on
You
History
Saved
In progress 0 courses
compleat 0 courses
#Art & Design #Adobe #ChatGPT #GitHub

#Command and Control

Showing: 34 courses
Ekoparty Security Conference

Red Team 101 - Introduction to Red Team Exercises

0 rewiews
Aprende sobre ejercicios de Red Team: actividades, frameworks y caso práctico en vivo. Descubre cómo los atacantes operan, evaden y persisten en sistemas comprometidos.
Add to list
1 Lesons
1 hour 34 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Decentralized C2 Using LogDrop - Exploiting Web Server Misconfigurations

0 rewiews
Descubre LogDrop, una técnica innovadora para establecer canales de comando y control aprovechando errores de configuración en servidores web. Aprende sobre ciberseguridad y nuevas estrategias de Red Team.
Add to list
1 Lesons
25 minutes
On-Demand
Free-Video
SecurityFWD

Bypassing Endpoint Controls Using Office Macros - Techniques and Defenses

0 rewiews
Explore techniques for bypassing endpoint controls using Office macros, including crafting malicious documents, establishing C&C channels, and evading detection through advanced attack methods.
Add to list
15 Lesons
48 minutes
On-Demand
Free-Video
BruCON Security Conference

CommandGPT: Using ChatGPT for C2 and Post-Exploitation - Lecture 13

0 rewiews
Explore CommandGPT's potential in offensive security, leveraging AI for dynamic code generation in command and control frameworks and simulating ransomware techniques.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
OWASP Foundation

ClickOnce Exploitation: One-Click Network Foothold - AppSec California 2016

0 rewiews
Explore ClickOnce deployment vulnerabilities and learn a new methodology for establishing network footholds through minimal user interaction and phishing techniques.
Add to list
32 Lesons
40 minutes
On-Demand
Free-Video
OWASP Foundation

DIY Command and Control for Fun and No Profit

0 rewiews
Hands-on exploration of Command & Control botnets, providing insight into cybercriminal operations. Includes live malware demonstration for a realistic glimpse into this dark corner of the internet.
Add to list
1 Lesons
1 hour 2 minutes
On-Demand
Free-Video
BruCON Security Conference

Improving Cyber Resilience Through Micro Attack Simulations

0 rewiews
Innovative Micro Attack Simulations approach for validating specific security controls, enhancing cyber resilience through targeted assessments of technical and non-technical aspects, demonstrated with a ransomware attack case study.
Add to list
1 Lesons
50 minutes
On-Demand
Free-Video
DefCamp

Very Unusual Case of C2 Over DNS from Certain Firewalls

0 rewiews
Explore an unusual case of C2 over DNS from specific firewalls, presented by Piotr Głaska at DefCamp Cluj-Napoca 2024. Gain insights into this unique cybersecurity scenario and its implications.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
BSidesLV

Rolling out the C2 - Modern Red Team Infrastructure in 2024

0 rewiews
Explore modern red team infrastructure setup using Azure Cloud, Tailscale VPN, GitLab, and containerization. Learn to deploy secure C2 systems for effective penetration testing and security assessments.
Add to list
1 Lesons
54 minutes
On-Demand
Free-Video
DefCamp

Stage 1 C2 in 3 Days - DefCamp Cluj-Napoca 2024

0 rewiews
Explore rapid C2 infrastructure setup for penetration testing in this DefCamp presentation. Learn efficient techniques for Stage 1 Command and Control deployment within tight timeframes.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Windows Agentless C2 - Abusing the MDM Client Stack

0 rewiews
Unveils innovative research on exploiting Windows MDM stack for agentless C2 systems. Explores vulnerabilities, custom C2 server creation, and remote device control techniques, inspiring new defensive strategies.
Add to list
1 Lesons
53 minutes
On-Demand
Free-Video
DEFCONConference

The Art of Compromising Command and Control Servers - A Web Application Vulnerabilities Perspective

0 rewiews
Dive into techniques for exploiting command and control server vulnerabilities, uncovering infrastructure weaknesses, and exposing threat actors through common web application security flaws.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
Microsoft

Leverage Recorded Future Playbooks to Automatically Integrate Threat Intelligence with Microsoft Azure

0 rewiews
Automate threat intelligence integration in Microsoft Azure using Recorded Future Playbooks for enhanced detection, enrichment, and prevention in Sentinel and Defender ATP.
Add to list
1 Lesons
25 minutes
On-Demand
Free-Video
OWASP Foundation

Abusing Cloud Apps 101 - Command and Control

0 rewiews
Explore techniques for exploiting cloud applications as command and control infrastructure, focusing on security vulnerabilities and defensive strategies.
Add to list
1 Lesons
53 minutes
On-Demand
Free-Video
BruCON Security Conference

Reinvestigating PowerShell Attacks

0 rewiews
Explore the evolution of PowerShell attacks, offensive techniques, and defensive strategies since 2014, including insights on Desired State Configuration for covert persistence and command and control.
Add to list
1 Lesons
1 hour
On-Demand
Free-Video
Security BSides San Francisco

So You Think You Can Secure Your Cloud - Red Team Engagements in GCP

0 rewiews
Comprehensive guide to adversary simulations in GCP, covering initial access, persistence, privilege escalation, C2 using Google products, and data exfiltration techniques.
Add to list
17 Lesons
51 minutes
On-Demand
Free-Video
Black Hat

Circumventing the Guardians - How the Security Features in State-of-the-Art TLS Inspection Solutions Can Be Exploited for Covert Data Exfiltration

0 rewiews
Unveiling a stealthy data exfiltration method that bypasses TLS inspection security solutions. Learn about SNIcat and how it circumvents perimeter defenses, with insights on mitigation and detection strategies.
Add to list
18 Lesons
26 minutes
On-Demand
Free-Video
Black Hat

DSCompromised - A Windows DSC Attack Framework

0 rewiews
Explore a PowerShell toolkit leveraging Windows Desired State Configuration for command-and-control, malware persistence, and automatic re-infection. Learn attack techniques and defensive strategies.
Add to list
1 Lesons
59 minutes
On-Demand
Free-Video
Black Hat

Game of Chromes - Owning the Web with Zombie Chrome Extensions

0 rewiews
Explore how malicious Chrome extensions can create botnets, distribute themselves, and exploit vulnerabilities. Learn about attack patterns, extension capabilities, and security measures.
Add to list
14 Lesons
46 minutes
On-Demand
Free-Video

Honey I Stole Your C2 Server - A Dive into Attacker Infrastructure

0 rewiews
Explore attacker infrastructure through a Mandiant investigation, covering Metasploit indicators, command and control, encoding, and insights into attacker techniques and tools.
Add to list
30 Lesons
31 minutes
On-Demand
Free-Video

Weaponizing Splunk - Using Blue Teams for Evil

0 rewiews
Explore how attackers can exploit Splunk for malicious purposes, including data extraction and command control, in this eye-opening cybersecurity presentation.
Add to list
7 Lesons
22 minutes
On-Demand
Free-Video

Disrupting the Killchain

0 rewiews
Explore cybersecurity strategies to disrupt attack killchains, covering reconnaissance, exploitation, and command & control phases with practical defensive measures and tools.
Add to list
34 Lesons
52 minutes
On-Demand
Free-Video
BSidesLV

Abusing Webhooks for Command and Control

0 rewiews
Explore techniques for exploiting webhooks as command and control channels in cybersecurity. Learn about potential vulnerabilities and defensive strategies.
Add to list
1 Lesons
28 minutes
On-Demand
Free-Video
DEFCONConference

Finding Foes and Yourself with Latency Trilateration

0 rewiews
Discover how latency trilateration can revolutionize cyber threat intelligence by geolocating adversary servers through network signal timing measurements and physical principles.
Add to list
1 Lesons
21 minutes
On-Demand
Free-Video
x33fcon

Discord as Malware Infrastructure - Emerging Threats and Attack Trends

0 rewiews
Explore how cybercriminals leverage Discord as malware infrastructure and discover emerging threats targeting hackers, with insights into Turkish threat actors' tactics.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
DEFCONConference

Simulating Attacks Against Hydroelectric Power Plants Using ICS Firing Range

0 rewiews
Dive into a comprehensive simulation of cyberattacks on hydroelectric facilities, exploring both offensive tactics and defensive strategies through a custom-built ICS firing range environment.
Add to list
1 Lesons
23 minutes
On-Demand
Free-Video
DEFCONConference

MFT: Using NFTs as Attack Vectors for Command and Control

0 rewiews
Explore how NFTs can be weaponized as attack vectors for C2 commands, featuring the mFT tool for creating malicious payloads and understanding blockchain-backed threats in cybersecurity.
Add to list
1 Lesons
22 minutes
On-Demand
Free-Video
x33fcon

Hiding C2 Communications in Plain Sight Using Windows Memory Page Permissions

0 rewiews
Discover advanced techniques for hiding C2 communications by exploiting Windows memory page permissions, with practical approaches to building modular and stealthy command-and-control systems.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
x33fcon

NTLM Relay Attacks - An OPSEC-Conscious Approach to Port 445 Takeover

0 rewiews
Discover a stealthy technique for NTLM relay attacks by hijacking port 445/tcp, featuring reverse engineering insights and automation tools for enhanced SMB-based operations with minimal detection risk.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video
Recon Village

Identifying North Korean State-Sponsored Threat Actors Through Malware Analysis and OSINT

0 rewiews
Uncover the journey of identifying a North Korean state-sponsored threat actor through malware analysis, OSINT investigation, and interviews with intelligence agencies and security forces.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
DEFCONConference

Malware Design: Abusing Legacy Microsoft Transports and Session Architecture

0 rewiews
Explore advanced malware design techniques and covert communication frameworks, focusing on Windows architecture exploitation and maintaining persistent access while evading detection systems.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
DEFCONConference

Behind Enemy Lines: Engaging and Disrupting Ransomware Web Panels

0 rewiews
Dive into advanced strategies for infiltrating and disrupting ransomware operations by targeting their web panels, APIs, and command centers while gathering vital intelligence on threat actors.
Add to list
1 Lesons
39 minutes
On-Demand
Free-Video
DevSecCon

Living off the Cloud Attacks - You Should Know About Them

0 rewiews
Explore cloud-based attacks, their detection challenges, and mitigation strategies. Gain insights into malware communication via API through a live demo and learn effective prevention techniques.
Add to list
13 Lesons
1 hour 4 minutes
On-Demand
Free-Video
Conf42

TTPs of Attacks on OSS in Python - Trusty Package Security

0 rewiews
Explore tactics and techniques of supply-chain attacks on Python open-source software, including starjacking, installation, delivery, and exfiltration. Learn defensive strategies against these threats.
Add to list
15 Lesons
1 hour 14 minutes
On-Demand
Free-Video