Atomic Spotlight: Ingress Tool Transfer with LOLbins | Carrie Roberts

Описание: Learn attack emulation tools atomic read team caldera with Carrie Roberts from Antisyphon
Training: https://www.antisyphontraining.com/at...
00:00 - Intro/Pre-Show Banter
00:55 - Atomic Red team T1105 Ingress Tool Transfer
08:15 - Atomic Test #7 certutil download
13:30 - Running more Atomic Tests to find exploits
20:22 - Finding an exploit with Curl in Atomic Test 18 and 19
25:58 - Using Certreq in Test #25

Description: Atomic Spotlight: Ingress Tool Transfer with LOLbins, certutil, BITSadmin, MpCmdRun, finger, certreq and more. Learn more about MITRE ATT&CK Technique T1105, Ingress Tool Transfer using built-in "Live of the Land" executables (LOLbins). These attack procedures are easy to emulate using the Atomic Red Team library of scripted cyber attacks.

Antisyphon Socials
Twitter:   / antisy_training  
LinkedIn:   / anti.  .
Discord:   / discord  
Mastodon: https://infosec.exchange/@Antisy_Trai...

Antisyphon Training
Pay What You Can: https://www.antisyphontraining.com/pa...
Live Training: https://www.antisyphontraining.com/co...
On Demand Training: https://www.antisyphontraining.com/on...

Antisyphon Shirts
https://spearphish-general-store.mysh...

Educational Infosec Content
Black Hills Infosec YouTube:    / blackhillsinf.  .
Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/
Wild West Hackin' Fest YouTube:    / wildwesthacki.  .
Active Countermeasures YouTube:    / activecountermeas.  .

Backdoors & Breaches - Incident Response Card Game
Backdoors & Breaches: https://www.backdoorsandbreaches.com/
Play B&B Online: https://play.backdoorsandbreaches.com

Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/

#bhis #antisyphon #infosec