The Advanced Persistent Pentester - All Your Networks Are Belong 2 Us

The Advanced Persistent Pentester - All Your Networks Are Belong 2 Us

Explore advanced persistent penetration testing techniques in this 39-minute conference talk from Derbycon 2016. Delve into traditional pen testing methods before transitioning to Advanced Persistent Pen (APP) Testing. Learn about Java (De)Serialization, including reading objects from disk, understanding Java Serialized Object Format, and utilizing Input and Output Classes. Gain insights into using Java De-Compiler (JD-GUI) and methodology considerations. Examine a black box test example and case study, and discover post-exploitation techniques beyond Domain Admin. Get introduced to MailSniper, a powerful tool for penetration testing. Conclude with a summary of key takeaways and final thoughts on advanced persistent pentesting strategies.