Hello Reader,
Another year of CCDC is over and another winner has been crowned.
For those of you just here for the presentation, here are this years debrief slides:
https://www.dropbox.com/s/o2fkwbjsefq1ixk/NCCDC2018.pptx?dl=0
For those of you looking for more:
This year at Nationals we had a lot of success as a red team From 0 knowledge (Except ips in scope) to plain text credentials in 3 minutes ensured that our initial load of persistence was successful. However like in all great pursuits it was not perfect. This year we attempted different delivery and propagation techniques that need to validate our malware was successfully implanted to make sure all systems are talking to us.
Speaking of talking to us this year teams got better at their egress filtering and locking down incoming services. This means we have to get better at backdooring existing services and work on techniques that don't require call backs that egress filtering will stop.
Lots to plan, lots to do for next year.
Another year of CCDC is over and another winner has been crowned.
For those of you just here for the presentation, here are this years debrief slides:
https://www.dropbox.com/s/o2fkwbjsefq1ixk/NCCDC2018.pptx?dl=0
For those of you looking for more:
This year at Nationals we had a lot of success as a red team From 0 knowledge (Except ips in scope) to plain text credentials in 3 minutes ensured that our initial load of persistence was successful. However like in all great pursuits it was not perfect. This year we attempted different delivery and propagation techniques that need to validate our malware was successfully implanted to make sure all systems are talking to us.
Speaking of talking to us this year teams got better at their egress filtering and locking down incoming services. This means we have to get better at backdooring existing services and work on techniques that don't require call backs that egress filtering will stop.
Lots to plan, lots to do for next year.
Posts
