MailFail: Whos Spoofing your Email, and How are they Doing it? #livestream #infosec #email #server Black Hills Information Security 2026-09-23 | MailFail: Whos Spoofing your Email, and How are they Doing it? #livestream #infosec #email #server
Atomic Spotlight: PowerShell History Shenanigans Black Hills Information Security 2022-12-12 | In this Spotlight we cover defense evasion techniques including a new one outlined in my blog post on Black Hills Information Security blog. blackhillsinfosec.com/new-powershell-history-defense-evasion-techniqueLearn more about Attack Emulation Tools here: antisyphontraining.com/attack-emulation-tools-atomic-red-team-caldera-and-more-w-carrie-robertsI also have a "PowerShell For InfoSec: What You Need to Know!" course:antisyphontraining.com/powershell-for-infosec-what-you-need-to-know
BHIS Webcast: Basics of Burp(ing) w/ Chris Traynor | 1-Hour Black Hills Information Security 2022-12-12 | zoom.us/webinar/register/1616484846408/WN_lWSUVVp1RmGNxSHlPPKKLQIn this Black Hills Information Security (BHIS) webcast, we will introduce you to Portswigger's Burp - a powerful tool for web application security testing. We will cover the key capabilities of Burp and demonstrate how it can be used to identify vulnerabilities in web applications.Whether you are a beginner or an experienced security professional, this webcast will provide valuable insights into this powerful Pentesting tool and how it can help you improve the security of your web applications.Join Chris Traynor (@cstraynor ) as he discusses this essential tool for web application security testing.Come hang out with us, it will be a gas!Chat with your fellow attendees in the Black Hills Infosec Discord server here: discord.gg/BHIS -- in the #webcast-live-chat channel.
AASLR: SMUDGE the new opensource passive fingerprinting tool Black Hills Information Security 2022-12-12 | Active Countermeasures has a new tool for you! SMUDGE is a purely passive fingerprinting tool that identifies systems via TCP SYN packets. This completely free and opensource tool uses a curated list of verified signatures to help you identify even more about your traffic. Please join us to learn all about SMUDGE!
AASLR: Breaching buckets CyberRange Walkthrough with Serena Black Hills Information Security 2022-12-12 | ...
The Top $ num Reasons You Got Hacked in 2022 with Kent & Jordan | 1 Hour Black Hills Information Security 2022-12-08 | Learn purple teaming from Kent & Jordan: antisyphontraining.com/applied-purple-teaming-w-kent-ickler-and-jordan-drysdale00:00 - FEATURE PRESENTATION: The Top $_num Reasons You Got Hacked in 202200:57 - A little Intro01:58 - Executive Problem Statement04:18 - 2020’s Top Exploited CVEs07:41 - 2021 Top Exploited CVEs10:57 - The Transition Slide13:14 - Hackers Though16:04 - Investigation Methodology18:57 - 10: Firewalls26:17 - 9: Message Integrity30:55 - 8: Defaults37:35 - 7: Patching39:39 - 6: Weak Protocol Abuse43:50 - 5: Web Apps46:08 - 4: Employees48:47 - 3: Optics (Lack Thereof)51:27 - 2: ADCS53:50 - 1: Credentials57:21 - Closing and QuestionsYes, the webcast title is clickbait. We know.But...organizations keep getting hacked. Almost every day another organization gets criticized across our news feeds for losing more data, PII, and secrets. And we have an interesting perspective on the causes of and some possible solutions for organizations willing to listen.After taking a look through our 2022 contracts and findings, we would like to offer you a perspective through the looking glass. In this Black Hills Information Security (BHIS) & Antisyphon webcast, we have our top findings (why you got popped) and our recommendations (years of our expertise) to share. Let our experiences guide your security programs in 2023.Together, let's keep pushing the detection needle down from the industry approximation of 200 days to breach detection and 75 more to containment...We are looking forward to spending some time with you!Chat with your fellow attendees in the Infosec Knowledge Sharing Discord server here: discord.gg/fr5wqbF -- in the #webcast-live-chat channel///Black Hills Infosec SocialsTwitter: twitter.com/BHinfoSecurityLinkedIn: linkedin.com/company/antisyphon-trainingDiscord: discord.gg/ffzdt3WUDe///Black Hills Infosec Shirts & Hoodiesspearphish-general-store.myshopify.com/collections/bhis-shirt-collections///Black Hills Infosec ServicesActive SOC: blackhillsinfosec.com/services/active-socPenetration Testing: blackhillsinfosec.com/servicesIncident Response: blackhillsinfosec.com/services/incident-response///Backdoors & Breaches - Incident Response Card GameBackdoors & Breaches: backdoorsandbreaches.comPlay B&B Online: play.backdoorsandbreaches.com///Antisyphon TrainingPay What You Can: antisyphontraining.com/pay-what-you-canLive Training: antisyphontraining.com/course-catalogOn Demand Training: antisyphontraining.com/on-demand-course-catalog///Educational Infosec ContentBlack Hills Infosec Blogs: blackhillsinfosec.com/blogWild West Hackin' Fest YouTube: youtube.com/wildwesthackinfestActive Countermeasures YouTube: youtube.com/activecountermeasuresAntisyphon Training YouTube: youtube.com/antisyphontrainingJoin us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
AASLR: Leveraging SSH Keys for Lateral Movement | Hal Pomeranz Black Hills Information Security 2022-12-07 | Learn cloud security and penetration testing from Hal Pomeranz:antisyphontraining.com/linux-command-line-dojo-w-hal-pomeranzantisyphontraining.com/linux-forensics-w-hal-pomeranz///Black Hills Infosec SocialsTwitter: twitter.com/BHinfoSecurityLinkedIn: linkedin.com/company/antisyphon-trainingDiscord: discord.gg/ffzdt3WUDe///Black Hills Infosec Shirts & Hoodiesspearphish-general-store.myshopify.com/collections/bhis-shirt-collections///Black Hills Infosec ServicesActive SOC: blackhillsinfosec.com/services/active-socPenetration Testing: blackhillsinfosec.com/servicesIncident Response: blackhillsinfosec.com/services/incident-response///Backdoors & Breaches - Incident Response Card GameBackdoors & Breaches: backdoorsandbreaches.comPlay B&B Online: play.backdoorsandbreaches.com///Antisyphon TrainingPay What You Can: antisyphontraining.com/pay-what-you-canLive Training: antisyphontraining.com/course-catalogOn Demand Training: antisyphontraining.com/on-demand-course-catalog///Educational Infosec ContentBlack Hills Infosec Blogs: blackhillsinfosec.com/blogWild West Hackin' Fest YouTube: youtube.com/wildwesthackinfestActive Countermeasures YouTube: youtube.com/activecountermeasuresAntisyphon Training YouTube: youtube.com/antisyphontrainingJoin us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
AASLR: Tools for Testing APIs | Jennifer Shannon Black Hills Information Security 2022-12-06 | Learn cloud security and penetration testing from the Professionally Evil Secure ideasl Team:antisyphontraining.com/professionally-evil-cissp-mentorship-programantisyphontraining.com/professionally-evil-api-testingantisyphontraining.com/red-team-fundamentals-for-active-directoryantisyphontraining.com/owasp-top-10///Black Hills Infosec SocialsTwitter: twitter.com/BHinfoSecurityLinkedIn: linkedin.com/company/antisyphon-trainingDiscord: discord.gg/ffzdt3WUDe///Black Hills Infosec Shirts & Hoodiesspearphish-general-store.myshopify.com/collections/bhis-shirt-collections///Black Hills Infosec ServicesActive SOC: blackhillsinfosec.com/services/active-socPenetration Testing: blackhillsinfosec.com/servicesIncident Response: blackhillsinfosec.com/services/incident-response///Backdoors & Breaches - Incident Response Card GameBackdoors & Breaches: backdoorsandbreaches.comPlay B&B Online: play.backdoorsandbreaches.com///Antisyphon TrainingPay What You Can: antisyphontraining.com/pay-what-you-canLive Training: antisyphontraining.com/course-catalogOn Demand Training: antisyphontraining.com/on-demand-course-catalog///Educational Infosec ContentBlack Hills Infosec Blogs: blackhillsinfosec.com/blogWild West Hackin' Fest YouTube: youtube.com/wildwesthackinfestActive Countermeasures YouTube: youtube.com/activecountermeasuresAntisyphon Training YouTube: youtube.com/antisyphontrainingJoin us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
Atomic Spotlight: User Account Control Bypasses with UACME Project Executables Black Hills Information Security 2022-12-05 | UAC Bypasses using UACME and the Atomic Red Team library of scripted cyber attacks. Learn more about Attack Emulation Tools here: antisyphontraining.com/attack-emulation-tools-atomic-red-team-caldera-and-more-w-carrie-roberts
BHIS - Talkin Bout [infosec] News 2022-12-05 Black Hills Information Security 2022-12-05 | 00:00 - PreShow Banter™ — Florida Bobsleding Team07:02 - BHIS - Talkin’ Bout [infosec] News 2022-12-0509:42 - Story # 1: There are no episodes of Darknet Diaries scheduled Q1twitter.com/JackRhysider/status/159911598426227097711:38 - Story # 2: Elon Musk Meets With Apple CEO Tim Cook Amid Claims of Twitter App Store Disputemacrumors.com/2022/11/30/elon-musk-tim-cook-meeting-apple-park16:52 - Story # 3: Anker’s Eufy Cameras Caught Uploading Content to the Cloud Without User Consentmacrumors.com/2022/11/29/eufy-camera-cloud-uploads-no-user-consent25:32 - Story # 3b: Eufy caught lying about local-only security cameras with footage sent to cloud, accessible in unencrypted streams9to5google.com/2022/12/01/eufy-camera-cloud-security-leak29:08 - Story # 4: FCC faces long road in stripping Chinese tech from US telecom networkscyberscoop.com/fcc-huawei-zte-security-risks36:33 - Story # 5: TikTok NSFW if you work for the South Dakota governmenttheregister.com/2022/11/30/tiktok_nsfw_if_you_work39:54 - Story # 6: Never-before-seen malware is nuking data in Russia’s courts and mayors’ officesarstechnica.com/information-technology/2022/12/never-before-seen-malware-is-nuking-data-in-russias-courts-and-mayors-offices44:10 - Story # 7: Lessons from Russia’s cyber-war in Ukraineeconomist.com/science-and-technology/2022/11/30/lessons-from-russias-cyber-war-in-ukraine46:29 - Story # 8: DHS Cyber Safety Review Board to focus on Lapsus$ hackerscyberscoop.com/cybersecurity-review-board-lapsus52:03 - Story # 8b: Cyber Safety Review Board to Conduct Second Review on Lapsus$dhs.gov/news/2022/12/02/cyber-safety-review-board-conduct-second-review-lapsus52:56 - Story # 9: Rackspace rocked by ‘security incident’ that has taken out hosted Exchange servicestheregister.com/2022/12/03/rackspace_security_incident_hosted_exchange59:19 - Story # 10: Red Alert: The SFPD Want the Power to Kill with Robotseff.org/deeplinks/2022/11/red-alert-sfpd-want-power-kill-robots///Black Hills Infosec SocialsTwitter: twitter.com/BHinfoSecurityLinkedIn: linkedin.com/company/antisyphon-trainingDiscord: discord.gg/ffzdt3WUDe///Black Hills Infosec Shirts & Hoodiesspearphish-general-store.myshopify.com/collections/bhis-shirt-collections///Black Hills Infosec ServicesActive SOC: blackhillsinfosec.com/services/active-socPenetration Testing: blackhillsinfosec.com/servicesIncident Response: blackhillsinfosec.com/services/incident-response///Backdoors & Breaches - Incident Response Card GameBackdoors & Breaches: backdoorsandbreaches.comPlay B&B Online: play.backdoorsandbreaches.com///Antisyphon TrainingPay What You Can: antisyphontraining.com/pay-what-you-canLive Training: antisyphontraining.com/course-catalogOn Demand Training: antisyphontraining.com/on-demand-course-catalog///Educational Infosec ContentBlack Hills Infosec Blogs: blackhillsinfosec.com/blogWild West Hackin' Fest YouTube: youtube.com/wildwesthackinfestActive Countermeasures YouTube: youtube.com/activecountermeasuresAntisyphon Training YouTube: youtube.com/antisyphontrainingJoin us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
How to Build a Home Lab for Infosec with Ralph May | 1 Hour Black Hills Information Security 2022-12-02 | Learn cloud security and penetration testing from Ralph May-- antisyphontraining.com/hackerops-w-ralph-may00:00 - FEATURE PRESENTATION00:27 - WhoAMI01:22 - Warnings03:05 - Why a Home Lab?05:14 - Goals of a Home Lab05:57 - Homelab Parts06:47 - Network07:15 - Internet07:55 - Firewall09:04 - Firewall Options13:32 - Firewall Diagram14:27 - Switch15:29 - Switch Options15:56 - WiFI17:18 - Wifi Hardware17:41 - Storage18:45 - Storage RAID20:54 - Storage Types21:29 - Storage Local Vs NAS23:00 - Storage NAS Build25:03 - Storage NAS Buy26:26 - Compute27:53 - Compute X86-6428:40 - Compute AMD Desktop29:45 - Compute AMD Laptop30:52 - Compute ARM32:40 - Compute RAM33:51 - Compute PCI34:50 - Compute GPU36:07 - Compute Management37:33 - Compute Laptop38:15 - Compute Mini PC / Desktop38:55 - Compute Server39:35 - Compute Options43:41 - Hardware Deals44:17 - Virtualization / Containers46:06 - Automation47:07 - Applications47:30 - AD Lab48:02 - Detection Lab48:25 - Self Hosted49:29 - IDS / IPS49:48 - Security Distro50:27 - Logging50:57 - HELK51:24 - Cloud51:58 - Cloud Providers52:10 - Cloud Lab53:49 - Cloud on the Cheap54:17 - Community54:37 - Recap55:34 - Questions and ClosingIn this Black Hills Information Security (BHIS) & Antisyphon webcast, we will learn all about home labs, what they are, recommendations on what to buy, and what you can do with them. The world of home labs can be as simple as one computer and as complex as a cluster in a server rack. The wildest thing is what you can do with these home labs and how they can help you learn IT concepts firsthand. On top of running stuff at home, we will discuss how to use the cloud to augment your home lab and when it makes the most sense. We hope to see you all there!Chat with your fellow attendees in the Infosec Knowledge Sharing Discord server here: discord.gg/fr5wqbF -- in the #webcast-live-chat channel.///Slides for this webcast:blackhillsinfosec.com/wp-content/uploads/2022/12/SLIDES_How-to-Homelab.pdf///Black Hills Infosec SocialsTwitter: twitter.com/BHinfoSecurityLinkedIn: linkedin.com/company/antisyphon-trainingDiscord: discord.gg/ffzdt3WUDe///Black Hills Infosec Shirts & Hoodiesspearphish-general-store.myshopify.com/collections/bhis-shirt-collections///Black Hills Infosec ServicesActive SOC: blackhillsinfosec.com/services/active-socPenetration Testing: blackhillsinfosec.com/servicesIncident Response: blackhillsinfosec.com/services/incident-response///Backdoors & Breaches - Incident Response Card GameBackdoors & Breaches: backdoorsandbreaches.comPlay B&B Online: play.backdoorsandbreaches.com///Antisyphon TrainingPay What You Can: antisyphontraining.com/pay-what-you-canLive Training: antisyphontraining.com/course-catalogOn Demand Training: antisyphontraining.com/on-demand-course-catalog///Educational Infosec ContentBlack Hills Infosec Blogs: blackhillsinfosec.com/blogWild West Hackin' Fest YouTube: youtube.com/wildwesthackinfestActive Countermeasures YouTube: youtube.com/activecountermeasuresAntisyphon Training YouTube: youtube.com/antisyphontrainingJoin us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
AASLR: CTF Walk Through with Serena & Noah Black Hills Information Security 2022-11-30 | Learn cloud security and penetration testing from Antisyphon Trainingantisyphontraining.com///Black Hills Infosec SocialsTwitter: twitter.com/BHinfoSecurityLinkedIn: linkedin.com/company/antisyphon-trainingDiscord: discord.gg/ffzdt3WUDe///Black Hills Infosec Shirts & Hoodiesspearphish-general-store.myshopify.com/collections/bhis-shirt-collections///Black Hills Infosec ServicesActive SOC: blackhillsinfosec.com/services/active-socPenetration Testing: blackhillsinfosec.com/servicesIncident Response: blackhillsinfosec.com/services/incident-response///Backdoors & Breaches - Incident Response Card GameBackdoors & Breaches: backdoorsandbreaches.comPlay B&B Online: play.backdoorsandbreaches.com///Antisyphon TrainingPay What You Can: antisyphontraining.com/pay-what-you-canLive Training: antisyphontraining.com/course-catalogOn Demand Training: antisyphontraining.com/on-demand-course-catalog///Educational Infosec ContentBlack Hills Infosec Blogs: blackhillsinfosec.com/blogWild West Hackin' Fest YouTube: youtube.com/wildwesthackinfestActive Countermeasures YouTube: youtube.com/activecountermeasuresAntisyphon Training YouTube: youtube.com/antisyphontrainingJoin us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
AASLR: Intro to Tabletop Exercises & IR Playbook Fun (*Non Denominational Winter Holiday Version) Black Hills Information Security 2022-11-29 | Learn cloud security and penetration testing from Amanda & Jeremyantisyphontraining.com/security-defense-and-detection-ttx-w-amanda-berlin-and-jeremy-mio///Black Hills Infosec SocialsTwitter: twitter.com/BHinfoSecurityLinkedIn: linkedin.com/company/antisyphon-trainingDiscord: discord.gg/ffzdt3WUDe///Black Hills Infosec Shirts & Hoodiesspearphish-general-store.myshopify.com/collections/bhis-shirt-collections///Black Hills Infosec ServicesActive SOC: blackhillsinfosec.com/services/active-socPenetration Testing: blackhillsinfosec.com/servicesIncident Response: blackhillsinfosec.com/services/incident-response///Backdoors & Breaches - Incident Response Card GameBackdoors & Breaches: backdoorsandbreaches.comPlay B&B Online: play.backdoorsandbreaches.com///Antisyphon TrainingPay What You Can: antisyphontraining.com/pay-what-you-canLive Training: antisyphontraining.com/course-catalogOn Demand Training: antisyphontraining.com/on-demand-course-catalog///Educational Infosec ContentBlack Hills Infosec Blogs: blackhillsinfosec.com/blogWild West Hackin' Fest YouTube: youtube.com/wildwesthackinfestActive Countermeasures YouTube: youtube.com/activecountermeasuresAntisyphon Training YouTube: youtube.com/antisyphontrainingJoin us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
Atomic Spotlight: Defense Evasion with PowerShell Encoded Command Black Hills Information Security 2022-11-28 | Atomic Spotlight: Defense Evasion with PowerShell Encoded CommandIn this video we take intel from the Mitre ATT&CK framework and makes it actionable using the Atomic Red Team library of scripted cyber-attacks. This spotlight highlights a defense evasion technique using PowerShell to execute Base64 encoded commands, both from the command line and stored persistently in the Windows registry. Learn more about Attack Emulation Tools here: antisyphontraining.com/attack-emulation-tools-atomic-red-team-caldera-and-more-w-carrie-roberts
BHIS - Talkin Bout [infosec] News 2022-11-28 Black Hills Information Security 2022-11-28 | 00:00 - PreShow Banter™ — Inflatable Turkey01:49 - BHIS - Talkin’ Bout [infosec] News 2022-11-2804:11 - Story # 1: Musk recruits engineers for “Twitter 2.0”arstechnica.com/tech-policy/2022/11/musk-recruits-engineers-for-twitter-2-0-after-mass-layoffs-and-resignations08:12 - Story # 2: Security experts are laying Mastodon’s flaws baretechradar.com/news/security-experts-are-laying-mastodons-flaws-bare16:49 - Story # 3: 5.4 million Twitter users’ stolen data leaked online — more shared privatelybleepingcomputer.com/news/security/54-million-twitter-users-stolen-data-leaked-online-more-shared-privately20:15 - Story # 4: 34 Russian Cybercrime Groups Stole Over 50 Million Passwords with Stealer Malwarethehackernews.com/2022/11/34-russian-hacker-groups-stole-over-50.html21:48 - Story # 5: Sonder confirms data breach, documents and other PII potentially compromisedinfosecurity-magazine.com/news/sonder-confirms-data-breach30:19 - Story # 6: Why Medibank should have paid the hackershttps://www.smh.com.au/business/consumer-affairs/this-is-a-business-for-them-why-medibank-should-have-paid-the-hackers-20221121-p5bzzn.html33:17 - Story # 7: Hackers are locking out Mars Stealer operators from their own serverstechcrunch.com/2022/11/22/mars-stealers-flaw-lock-out36:17 - Story # 8: Ransomware gang says it won’t attack AirAsia again due to the “chaotic organisation” and sloppy security of hacked airline’s networkgrahamcluley.com/ouch-ransomware-gang-says-it-wont-attack-airasia-again-due-to-the-chaotic-organisation-and-sloppy-security-of-hacked-companys-network42:48 - Story # 9: Over 1,600 Docker Hub Repositories Were Found to Hide Malwareheimdalsecurity.com/blog/over-1600-docker-hub-repositories-were-found-to-hide-malware49:14 - Story # 10: New Windows Server updates cause domain controller freezes, restartsbleepingcomputer.com/news/microsoft/new-windows-server-updates-cause-domain-controller-freezes-restarts56:33 - Story # 11: Making Cobalt Strike harder for threat actors to abusecloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse///Black Hills Infosec SocialsTwitter: twitter.com/BHinfoSecurityLinkedIn: linkedin.com/company/antisyphon-trainingDiscord: discord.gg/ffzdt3WUDe///Black Hills Infosec Shirts & Hoodiesspearphish-general-store.myshopify.com/collections/bhis-shirt-collections///Black Hills Infosec ServicesActive SOC: blackhillsinfosec.com/services/active-socPenetration Testing: blackhillsinfosec.com/servicesIncident Response: blackhillsinfosec.com/services/incident-response///Backdoors & Breaches - Incident Response Card GameBackdoors & Breaches: backdoorsandbreaches.comPlay B&B Online: play.backdoorsandbreaches.com///Antisyphon TrainingPay What You Can: antisyphontraining.com/pay-what-you-canLive Training: antisyphontraining.com/course-catalogOn Demand Training: antisyphontraining.com/on-demand-course-catalog///Educational Infosec ContentBlack Hills Infosec Blogs: blackhillsinfosec.com/blogWild West Hackin' Fest YouTube: youtube.com/wildwesthackinfestActive Countermeasures YouTube: youtube.com/activecountermeasuresAntisyphon Training YouTube: youtube.com/antisyphontrainingJoin us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
Atomic Spotlight: Dead Simple C2 Comms with OpenSSL Black Hills Information Security 2022-11-21 | This video shows how to use OpenSSL to establish an encrypted Command & Control (C2) channel between a victim client and an externally controlled server. Only a few simple PowerShell commands executed on the victim make it possible. This attack can be emulated using the Atomic Red Team library of scripted cyber attacks as demonstrated in this video.
BHIS - Talkin Bout [infosec] News 2022-11-21 Black Hills Information Security 2022-11-21 | 00:00 - PreShow Banter™ — Meatball Country10:45 - BHIS - Talkin’ Bout [infosec] News 2022-11-2112:11 - Story # 1: Elon Musk gives employees two days to commit to ‘hardcore’ Twitter or lose their jobsengadget.com/best-black-friday-tv-deals-2022-144506723.html16:28 - Story # 1b: Twitter Two-Factor Authentication Has a Vulnerability - UPDATEDbankinfosecurity.com/twitter-second-factor-authentication-has-vulnerability-a-2047518:17 - Special Twitter Guest21:05 - Story # 2: Stealing passwords from infosec Mastodon - without bypassing CSPportswigger.net/research/stealing-passwords-from-infosec-mastodon-without-bypassing-csp24:04 - Story # 3: New Ransomware Data Is In: What’s Happening and How to Fight Backdarkreading.com/vulnerabilities-threats/new-ransomware-data-is-in-what-s-happening-and-how-to-fight-back28:00 - Story # 4: Hive Ransomware Attackers Extorted $100 Million from Over 1,300 Companies Worldwidethehackernews.com/2022/11/hive-ransomware-attackers-extorted-100.html36:58 - Story # 5: New ransomware encrypts files, then steals your Discord accountbleepingcomputer.com/news/security/new-ransomware-encrypts-files-then-steals-your-discord-account41:11 - Story # 6: Black Friday and Cyber Monday, crooks are already at worksecurityaffairs.co/wordpress/138737/cyber-crime/black-friday-and-cyber-monday-scams.html46:14 - Story # 7: 1Password embraces a passwordless futuretheverge.com/2022/11/17/23464817/1password-passkey-support-security-apple-google49:10 - Story # 2b reprise51:53 - Story # 8: Euro Authorities Warn World Cup Fans Over Qatari Appsinfosecurity-magazine.com/news/euro-authorities-world-cup-fans55:52 - Story # 9: TSA Found a Double-Edged Knife Hidden in a Gaming Laptoptomshardware.com/news/airport-tsa-knife-hidden-gaming-laptop///Black Hills Infosec SocialsTwitter: twitter.com/BHinfoSecurityLinkedIn: linkedin.com/company/antisyphon-trainingDiscord: discord.gg/ffzdt3WUDe///Black Hills Infosec Shirts & Hoodiesspearphish-general-store.myshopify.com/collections/bhis-shirt-collections///Black Hills Infosec ServicesActive SOC: blackhillsinfosec.com/services/active-socPenetration Testing: blackhillsinfosec.com/servicesIncident Response: blackhillsinfosec.com/services/incident-response///Backdoors & Breaches - Incident Response Card GameBackdoors & Breaches: backdoorsandbreaches.comPlay B&B Online: play.backdoorsandbreaches.com///Antisyphon TrainingPay What You Can: antisyphontraining.com/pay-what-you-canLive Training: antisyphontraining.com/course-catalogOn Demand Training: antisyphontraining.com/on-demand-course-catalog///Educational Infosec ContentBlack Hills Infosec Blogs: blackhillsinfosec.com/blogWild West Hackin' Fest YouTube: youtube.com/wildwesthackinfestActive Countermeasures YouTube: youtube.com/activecountermeasuresAntisyphon Training YouTube: youtube.com/antisyphontrainingJoin us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
AASLR: Getting started with Ansible | Ralph May Black Hills Information Security 2022-11-16 | Training Link “Learn hackerops with Ralp May from Antisyphon Training: antisyphontraining.com/hackerops-w-ralph-may00:00 - Intro/Pre-Show Banter 03:01 - Overview of Ansible 06:30 - Why Ansible 09:39 - Pitfalls 12:05 - Demo - installation 15:52 - Ansible Playbook 20:15 - Running playbook 24:11 - Installing Docker w/ Ansible 34:22 - Q&A Description: Ralp May joins us on AASLR to give us a beginner friendly demo of Ansible an open-source configuration management tool that aids in configuring Host Operating system. Antisyphon Socials Twitter: twitter.com/Antisy_Training LinkedIn: linkedin.com/company/antisyphon-training Discord: discord.gg/ffzdt3WUDe Antisyphon Training Pay What You Can: antisyphontraining.com/pay-what-you-can Live Training: antisyphontraining.com/course-catalog On Demand Training: antisyphontraining.com/on-demand-course-catalog Antisyphon Shirts spearphish-general-store.myshopify.com/collections/antisyphon-training Educational Infosec Content Black Hills Infosec YouTube: youtube.com/blackhillsinformationsecurity Black Hills Infosec Blogs: blackhillsinfosec.com/blog Wild West Hackin' Fest YouTube: youtube.com/wildwesthackinfest Active Countermeasures YouTube: youtube.com/activecountermeasures Backdoors & Breaches - Incident Response Card Game Backdoors & Breaches: backdoorsandbreaches.com Play B&B Online: play.backdoorsandbreaches.com Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
AASLR: 15 minutes with Joff Thyer | Antisyphon Instructor Black Hills Information Security 2022-11-15 | Learn cloud security and penetration testing from Joff Thyer -- antisyphontraining.com/regular-expressions-your-new-lifestyle-w-joff-thyerantisyphontraining.com/enterprise-attacker-emulation-and-c2-implant-development-w-joff-thyer///Black Hills Infosec SocialsTwitter: twitter.com/BHinfoSecurityLinkedIn: linkedin.com/company/antisyphon-trainingDiscord: discord.gg/ffzdt3WUDe///Black Hills Infosec Shirts & Hoodiesspearphish-general-store.myshopify.com/collections/bhis-shirt-collections///Black Hills Infosec ServicesActive SOC: blackhillsinfosec.com/services/active-socPenetration Testing: blackhillsinfosec.com/servicesIncident Response: blackhillsinfosec.com/services/incident-response///Backdoors & Breaches - Incident Response Card GameBackdoors & Breaches: backdoorsandbreaches.comPlay B&B Online: play.backdoorsandbreaches.com///Antisyphon TrainingPay What You Can: antisyphontraining.com/pay-what-you-canLive Training: antisyphontraining.com/course-catalogOn Demand Training: antisyphontraining.com/on-demand-course-catalog///Educational Infosec ContentBlack Hills Infosec Blogs: blackhillsinfosec.com/blogWild West Hackin' Fest YouTube: youtube.com/wildwesthackinfestActive Countermeasures YouTube: youtube.com/activecountermeasuresAntisyphon Training YouTube: youtube.com/antisyphontrainingJoin us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
Atomic Spotlight: Exploiting HiveNightmare/SeriousSAM for Priv Escalation Black Hills Information Security 2022-11-14 | Windows 10 and 11 were found to have too loose of permissions set for access to data in the Windows\System32\config directory resulting in System Backups allowing non-admin users to access sensitive information such as credentials of all users. Microsoft released an update to correct the permission issues but it did not proactively resolve the issue for existing backups. In this Atomic Spotlight we explore this vulnerability and how to exploit it using the Atomic Red Team library of scripted cyber attacks. Learn more about Attack Emulation Tools here: antisyphontraining.com/attack-emulation-tools-atomic-red-team-caldera-and-more-w-carrie-roberts
BHIS - Talkin Bout [infosec] News 2022-11-14 Black Hills Information Security 2022-11-14 | 00:00 - BHIS - Talkin’ Bout [infosec] News 2022-11-1402:39 - Story # 1: Hackers Dump Australian Health Records Online After Insurer Refuses to Pay Ransomgizmodo.com/hackers-health-info-online-medibank-pay-onion-dark-web-184976074210:33 - Story # 2: TransUnion LLC Confirms Recent Data Breach with State Attorney General’s Officejdsupra.com/legalnews/transunion-llc-confirms-recent-data-682831918:50 - Story # 3: Russian LockBit ransomware operator arrested in Canadableepingcomputer.com/news/security/russian-lockbit-ransomware-operator-arrested-in-canada23:43 - Story # 4: The downfall of FTX’s Sam Bankman-Fried sends shockwaves through the crypto worldnpr.org/2022/11/14/1136482889/ftx-sam-bankman-fried-shockwaves-crypto41:18 - Story # 5: Install Latest Windows Update ASAP! Patches Issued for 6 Actively Exploited Zero-Daysthehackernews.com/2022/11/install-latest-windows-update-asap.html43:10 - Story # 6: Elon Musk is putting Twitter at risk of billions in fines, warns company lawyertheverge.com/2022/11/10/23451198/twitter-ftc-elon-musk-lawyer-changes-fine-warning52:13 - Story # 7: https://infosec.exchange/explore56:12 - Story # 8: Microsoft Windows Sysmon Elevation of Privilege Vulnerabilitymsrc.microsoft.com/update-guide/vulnerability/CVE-2022-41120///Black Hills Infosec SocialsTwitter: twitter.com/BHinfoSecurityLinkedIn: linkedin.com/company/antisyphon-trainingDiscord: discord.gg/ffzdt3WUDe///Black Hills Infosec Shirts & Hoodiesspearphish-general-store.myshopify.com/collections/bhis-shirt-collections///Black Hills Infosec ServicesActive SOC: blackhillsinfosec.com/services/active-socPenetration Testing: blackhillsinfosec.com/servicesIncident Response: blackhillsinfosec.com/services/incident-response///Backdoors & Breaches - Incident Response Card GameBackdoors & Breaches: backdoorsandbreaches.comPlay B&B Online: play.backdoorsandbreaches.com///Antisyphon TrainingPay What You Can: antisyphontraining.com/pay-what-you-canLive Training: antisyphontraining.com/course-catalogOn Demand Training: antisyphontraining.com/on-demand-course-catalog///Educational Infosec ContentBlack Hills Infosec Blogs: blackhillsinfosec.com/blogWild West Hackin' Fest YouTube: youtube.com/wildwesthackinfestActive Countermeasures YouTube: youtube.com/activecountermeasuresAntisyphon Training YouTube: youtube.com/antisyphontrainingJoin us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
Securing AWS Discover Cloud Vulnerabilities via Pentesting Techniques | Beau Bullock Black Hills Information Security 2022-11-11 | Learn cloud security and penetration testing from Beau Bullock -- antisyphontraining.com/breaching-the-cloud-w-beau-bullock00:00 - FEATURE PRESENTATION01:48 - Roadmap04:45 - AWS- Authentication06:37 - Management Console07:10 - Initial Access08:20 - Public Accessibility of Resources09:57 - Secrets in Code Repositories11:24 - Phishing12:30 - Resource Exploitation14:00 - Post-Compromise Recon15:27 - AWS Permissions17:46 - Identity Vs Resource-based Policies19:42 - AWS Command Line24:04 - IAM Policy Enumeration24:35 - Identifying Public Resources28:38 - Privilege Escalation29:14 - Instance Metadata Service33:34 - User Data & ENV Vars34:34 - Assume Role Policies37:04 - Leveraging Scanning Tools38:00 - Pacu38:24 - ScoutSuite39:09 - WeirdAAL40:01 - DEMO!54:34 - Resources55:00 - Key Takeaways56:04 - The EndDescription: One of the most interesting things about cloud environments is that they tend to have an underlying API that can be leveraged for management of resources. But this API can also be abused by attackers for malicious purposes.In this Black Hills Information Security (BHIS) webcast, senior security analyst Beau Bullock shows how attackers targeting cloud-based services like Amazon Web Services (AWS) can leverage API access to laterally move from resource to resource. Examples of post-compromise reconnaissance and privilege escalation will be detailed. A multi-resource pivot will be demonstrated to show how cloud-based lateral movement can look.Black Hills Infosec SocialsTwitter: twitter.com/BHinfoSecurityLinkedIn: linkedin.com/company/antisyphon-trainingDiscord: discord.gg/ffzdt3WUDeBlack Hills Infosec Shirts & Hoodiesspearphish-general-store.myshopify.com/collections/bhis-shirt-collectionsBlack Hills Infosec ServicesActive SOC: blackhillsinfosec.com/services/active-socPenetration Testing: blackhillsinfosec.com/servicesIncident Response: blackhillsinfosec.com/services/incident-responseBackdoors & Breaches - Incident Response Card GameBackdoors & Breaches: backdoorsandbreaches.com Play B&B Online: play.backdoorsandbreaches.comAntisyphon TrainingPay What You Can: antisyphontraining.com/pay-what-you-can Live Training: antisyphontraining.com/course-catalog On Demand Training: antisyphontraining.com/on-demand-course-catalogEducational Infosec ContentBlack Hills Infosec Blogs: blackhillsinfosec.com/blog Wild West Hackin' Fest YouTube: youtube.com/wildwesthackinfest Active Countermeasures YouTube: youtube.com/activecountermeasuresAntisyphon Training YouTube: youtube.com/antisyphontrainingJoin us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
AASLR: Cyber Range Challenge Walkthrough/Solutions w/ Serena & Beau Black Hills Information Security 2022-11-09 | ...
AASLR: Dynamic Device Code Phishing with Steve Borosh Black Hills Information Security 2022-11-08 | ...
Atomic Spotlight: Persistence with Command Process Auto Run Registry Key Black Hills Information Security 2022-11-08 | In this video I demo a simple way to get persistent code execution every time the windows command prompt (cmd.exe) is run. This can be accomplished from a standard user context without requiring administrative access. Want to learn more? Check out my Attack Emulation Tools course here: antisyphontraining.com/attack-emulation-tools-atomic-red-team-caldera-and-more-w-carrie-roberts
BHIS - Talkin Bout [infosec] News 2022-11-07 Black Hills Information Security 2022-11-07 | 00:00 - PreShow Banter™ — A is for All Team05:27 - BHIS - Talkin’ Bout [infosec] News 2022-11-0708:57 - Story # 1: Musk to cut half of Twitter jobs and end remote work for the rest, report says24:22 - Story # 2: Dropbox Data Breach Another Multifactor Fail25:10 - Story # 2b: Dropbox Breach: Hackers Unauthorizedly Accessed 130 GitHub Source Code Repositories30:03 - Story # 3: Hundreds of U.S. news sites push malware in supply-chain attack34:27 - Story # 4: New TikTok Privacy Policy Confirms Chinese Staff Can Access European Users’ Data38:24 - Story # 5: A cyberattack blocked the trains in DenmarkSecurity Affairs47:01 - Story # 6: Facebook probably has your phone number, even if you never shared it. Now it has a secret tool to let you delete it.51:31 - Story # 7: China is likely stockpiling and deploying vulnerabilities, says Microsoft55:00 - Story # 8: Hackers selling access to 576 corporate networks for $4 million
BHIS | Firmware Enumeration Using Open Source Tools | Paul Asadoorian | 1-Hour Black Hills Information Security 2022-11-03 | In this Black Hills Information Security (BHIS) webcast, Paul will share free and open-source tools techniques to evaluate the state of security on the firmware-based devices that live inside your devices, and servers., including* Utilities such as dmidecode, fwupd, dbxtool, and Chipsec to explore devices and firmware* Enumerating and updating firmware within your system using LVFS (Linux Vendor Firmware Service)* Enabling Secure Boot and its components (and keeping your DBX up-to-date using new functionality in LVFS!)* Discovering Intel ME/AMT and associated vulnerabilities* Using Chipsec to understand the permissions applied (or not applied) on your SPI flash chipPaul Asadoorian (Podcast Personality at Security Weekly) works for Eclypsium as the Firmware Security Evangelist. Join the Infosec Knowledge Sharing Discord server: discord.gg/fr5wqbF
AASLR: Drive Vulnerability Remediation with MS Teams | Ean Meyer Black Hills Information Security 2022-11-02 | ...
AASLR: Hiding Your Malware’s Strings and Imports | Greg Hatcher Black Hills Information Security 2022-11-01 | ...
Atomic Spotlight: Persistence with Accessibility Features | Carrie Roberts Black Hills Information Security 2022-11-01 | Learn how hackers abuse Windows accessibility features to gain persistent access to compromised computers as we spotlight two different Atomic tests from the Atomic Red Team library of scripted cyber attacks.
BHIS - Talkin Bout Spooky [infosec] News 2022-10-31 Black Hills Information Security 2022-10-31 | 00:00 - PreShow Banter™ — Spook Show01:11 - BHIS - Talkin’ Bout [infosec] News 2022-10-3104:17 - Story # 1: OpenSSL warns of critical security vulnerability with upcoming patch - zdnet.com/article/openssl-warns-of-critical-security-vulnerability-with-upcoming-patch05:00 - Story # 1b: Notes on OpenSSL remote memory corruption - guidovranken.com/2022/06/27/notes-on-openssl-remote-memory-corruption12:50 - Story # 2: GitHub Bug Exposed Repositories to Hijacking - infosecurity-magazine.com/news/github-bug-hackers-hijack16:47 - Story # 3: Gartner Identifies the Top 10 Strategic Technology Trends for 2023 - gartner.com/en/newsroom/press-releases/2022-10-17-gartner-identifies-the-top-10-strategic-technology-trends-for-202326:39 - Story # 4: Former U.K. Prime Minister Liz Truss’ Phone Allegedly Hacked By Kremlin Spies: Report - forbes.com/sites/daveywinder/2022/10/30/former-uk-prime-minister-liz-trusss-phone-allegedly-hacked-by-kremlin-spies-report35:41 - Story # 5: New Azov data wiper tries to frame researchers and BleepingComputer - bleepingcomputer.com/news/security/new-azov-data-wiper-tries-to-frame-researchers-and-bleepingcomputer
BHIS | Pentester Tactics, Techniques, and Procedures TTPs | Chris Traynor Black Hills Information Security 2022-10-31 | Penetration Testing is often considered a dark art that's shrouded in mystery. This unfortunate perception can hold back organizations from being more secure and keep people from an exciting career.In this Black Hills Information Security (BHIS) webcast, join Chris Traynor (@cstraynor) as he shares the tactics, techniques, and procedures (TTPs) for a Pentester.Chat with your fellow attendees in the Infosec Knowledge Sharing Discord server here: discord.gg/fr5wqbF -- in the #webcast-live-chat channel./// Chapters00:00 - Pentester Tactics, Techniques, and Procedures (TTPs) with Chris Traynor00:21 - Whoami00:56 - Agenda02:36 - Baseline Terminology08:12 - Reconnaissance — Tactic/Intended Effect09:15 - Nmap — Tool/Mechanism11:14 - Nmap — Execution14:36 - Recon-ng – Tool/Mechanism19:57 - Recon-ng — Execution22:34 - Recon-ng — Cheatsheet25:13 - Account Enumeration — Tactic/Intended Effect26:10 - Burp Repeater — Tool/Mechanism27:01 - Burp Repeater — Execution33:51 - Password Spraying — Tactic/Intended Effect39:15 - Burp Intruder — Tool/Mechanism40:15 - Burp Intruder — Execution44:17 - smb_login Module — Tool/Mechanism45:51 - smb_login Module — Execution47:56 - psexec Module — Execution52:30 - Chris’s Other Talks54:18 - Post Show Questions
AASLR: Replicate Directory Changes Set of Rights in AD - Redux | Eric Kuehn Black Hills Information Security 2022-10-25 | ///Scripts shared:Get-ADObject -SearchBase $((Get-ADRootDSE).schemaNamingContext) -LDAPFilter "(&(objectClass=attributeSchema)(searchFlags:1.2.840.113556.1.4.803:=128))" -properties * | select lDAPDisplayName,SearchFlags | ft -AutoSizeGet-ADObject -SearchBase $((Get-ADRootDSE).schemaNamingContext) -LDAPFilter "(&(objectClass=attributeSchema)(searchFlags:1.2.840.113556.1.4.803:=640))" -properties * | select lDAPDisplayName,SearchFlags | ft -AutoSizegithub.com/neKuehn/MADs/blob/main/Invoke-ReplicateDirectoryChanges.ps1///Securing ADdocs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/best-practices-for-securing-active-directory
Atomic Spotlight: Persistence with Netsh Helper DLL Black Hills Information Security 2022-10-24 | Emulate adversaries by registering a Netsh Helper DLL to maintain persistent access to a compromised host.
BHIS - Talkin Bout [infosec] News 2022-10-24 Black Hills Information Security 2022-10-24 | 00:00 - PreShow Banter™ — When You Mustache Questions07:03 - BHIS - Talkin’ Bout [infosec] News 2022-10-2408:40 - Story # 1: Australia’s No. 1 health insurer says hacker stole patient details15:16 - Story # 2: Police tricked a ransomware gang into handing over its decryption keys. Here’s how they did it23:01 - Story # 3: Experts Warn of Stealthy PowerShell Backdoor Disguising as Windows Update27:39 - Story # 4: British company Interserve fined £4.4 million over ransomware attack31:17 - Story # 5: Microsoft data breach exposes customers’ contact info, emails36:50 - Story # 6: Microsoft fixes Windows TLS handshake failures in out-of-band updates39:23 - Story # 7: A bug in Abode’s home security system could let hackers remotely switch off cameras41:50 - Story # 8: Microsoft is bringing Android 13 to Windows 11 via WSA48:18 - Story # 9: Airborne Drones Are Dropping Cyber-Spy Exploits in the Wild52:17 - Story # 10: Zeek is Now a Component of Microsoft Windows56:32 - Story # 11: Eight RTX 4090s Can Break Passwords in Under an Hour
AASLR: Why? Exactly are you not using Atomic Red Team? | John Strand Black Hills Information Security 2022-10-19 | ...
BHIS - Talkin Bout [infosec] News 2022-10-17 Black Hills Information Security 2022-10-17 | 00:00:00 - PreShow Banter™ — Sweater Weather00:03:31 - BHIS - Talkin’ Bout [infosec] News 2022-10-0700:07:59 - Story # 1: The Verge: Cybersecurity Week 2022 - theverge.com/23365380/cybersecurity-week-series-phishing-encryption-device-security00:10:07 - Story # 2: Google Cybersecurity Action Team Threat Horizons Report #4 Is Out! - medium.com/anton-on-security/google-cybersecurity-action-team-threat-horizons-report-4-is-out-c221342004c300:27:02 - Story # 3: Caffeine service lets anyone launch Microsoft 365 phishing attacks - bleepingcomputer.com/news/security/caffeine-service-lets-anyone-launch-microsoft-365-phishing-attacks00:31:39 - Story # 4: AirTags in Checked Baggage - daringfireball.net/linked/2022/10/10/airtags-checked-baggage00:35:38 - Story # 5: International crackdown on West-African financial crime rings - https://www.interpol.int/en/News-and-Events/News/2022/International-crackdown-on-West-African-financial-crime-rings00:40:40 - Story # 6: Indian Energy Company Tata Power’s IT Infrastructure Hit By Cyber Attack - thehackernews.com/2022/10/indian-energy-company-tata-powers-it.html00:42:11 - Story # 6b: This Is How They Tell Me the World Ends: The Cyberweapons Arms Race - amazon.com/This-They-Tell-World-Ends/dp/163557605901:00:16 - Story # 6c: Brave New War: The Next Stage of Terrorism and the End of Globalization - amazon.com/Brave-New-War-Terrorism-Globalization/dp/0471780790
AASLR: Flash CTF walkthrough with Serena, live from WWHF Deadwood 2022 Black Hills Information Security 2022-10-12 | ...
BHIS - Talkin Bout [infosec] News 2022-10-10 Black Hills Information Security 2022-10-10 | 00:00 - PreShow Banter™ — For Real02:26 - BHIS - Talkin’ Bout [infosec] News 2022-10-1004:35 - Story # 1: US airports’ sites taken down in DDoS attacks by pro-Russian hackers - bleepingcomputer.com/news/security/us-airports-sites-taken-down-in-ddos-attacks-by-pro-20:25 - Story # 2: Former Uber Security Chief Found Guilty of Hiding Hack From Authorities - nytimes.com/2022/10/05/technology/uber-security-chief-joe-sullivan-verdict.html32:25 - Story # 3: Fortinet says critical auth bypass bug is exploited in attacks - bleepingcomputer.com/news/security/fortinet-says-critical-auth-bypass-bug-is-exploited-in-attacks41:26 - Story # 4: A cracked copy of Brute Ratel post-exploitation tool leaked on hacking forums - cybersecurityworldconference.com/2022/09/29/a-cracked-copy-of-brute-ratel-post-exploitation-tool-leaked-on-hacking-forums
BHIS - Talkin Bout [infosec] News 2022-10-03 Black Hills Information Security 2022-10-03 | Join the BHIS Community Discord: discord.gg/bhis00:00 - PreShow Banter™ — Dumpster Fire Friends08:57 - Story # 1: High-severity Microsoft Exchange 0-day under attack threatens 220,000 servers - arstechnica.com/information-technology/2022/09/high-severity-microsoft-exchange-0-day-under-attack-threatens-220000-servers21:01 - Story # 2: Stealthy hackers target military and weapons contractors in recent attack - bleepingcomputer.com/news/security/stealthy-hackers-target-military-and-weapons-contractors-in-recent-attack27:24 - Story # 3: Putin grants Russian citizenship to Edward Snowden - npr.org/2022/09/26/1125109303/putin-edward-snowden-russian-citizenship30:46 - Story # 4: What the Securing Open Source Software Act does and what it misses - zdnet.com/article/whats-what-in-the-united-states-securing-open-source-software-act40:00 - Story # 4b: SecBSD Team42:28 - Story # 5: New Malware Campaign Targeting Job Seekers with Cobalt Strike Beacons - thehackernews.com/2022/09/new-malware-campaign-targeting-job.html
AASLR: Cyber Range Challenge Walkthrough/Solutions w/ Serena Black Hills Information Security 2022-09-28 | ...
AASLR: Job Hunting Like a Hacker with Jason Blanchard Black Hills Information Security 2022-09-27 | ...
BHIS - Talkin Bout [infosec] News 2022-09-26 Black Hills Information Security 2022-09-26 | Reach out to Black Hills Infosec if you need pentesting, threat hunting, ACTIVE SOC, incident response, or blue team services -- blackhillsinfosec.com 00:00 - PreShow Banter™ 03:45 - BHIS - Talkin’ Bout [infosec] News 2022-09-26 06:15 - American Airlines Breach Exposes Customer and Staff Information infosecurity-magazine.com/news/american-airlines-breach-customer/k 22:56 - London police arrest, charge teen hacking suspect but won’t confirm GTA 6, Uber links theverge.com/2022/9/23/23368340/hacking-suspect-arrested-city-of-london-lapsus-gta-6-uber 29:35 - LockBit ransomware builder leaked online by “angry developer” bleepingcomputer.com/news/security/lockbit-ransomware-builder-leaked-online-by-angry-developer- 34:24 - Malwarebytes blocks Google, YouTube as malware theregister.com/2022/09/21/malwarebytes_blocks_google_domains 36:28 - AdGuard’s new ad blocker struggles with Google’s Manifest v3 rules bleepingcomputer.com/news/security/adguard-s-new-ad-blocker-struggles-with-google-s-manifest-v3-rules 41:48 - Adware on Google Play and Apple Store installed 13 million times bleepingcomputer.com/news/security/adware-on-google-play-and-apple-store-installed-13-million-times 45:39 - Revealed: US Military Bought Mass Monitoring Tool That Includes Internet Browsing, Email Data vice.com/en/article/y3pnkw/us-military-bought-mass-monitoring-augury-team-cymru-browsing-email-data 55:20 - SIM Swapper Abducted, Beaten, Held for $200k Ransom krebsonsecurity.com/2022/09/sim-swapper-abducted-beaten-held-for-200k-ransom Description: Our September 26, 2022, edition of Talkin’ Bout[infosec]! Brought to you by Black Hills Information Security! We talk about infosec news every Monday at 4:30EST Black Hills Infosec Socials Twitter: twitter.com/BHinfoSecurity LinkedIn: linkedin.com/company/antisyphon-training Discord: discord.gg/ffzdt3WUDe Black Hills Infosec Shirts & Hoodies spearphish-general-store.myshopify.com/collections/bhis-shirt-collections Black Hills Infosec Services Active SOC: blackhillsinfosec.com/services/active-soc Penetration Testing: blackhillsinfosec.com/services Incident Response: blackhillsinfosec.com/services/incident-response Backdoors & Breaches - Incident Response Card Game Backdoors & Breaches: backdoorsandbreaches.com Play B&B Online: play.backdoorsandbreaches.com Antisyphon Training Pay What You Can: antisyphontraining.com/pay-what-you-can Live Training: antisyphontraining.com/course-catalog On Demand Training: antisyphontraining.com/on-demand-course-catalog Educational Infosec Content Black Hills Infosec Blogs: blackhillsinfosec.com/blog Wild West Hackin' Fest YouTube: youtube.com/wildwesthackinfest Active Countermeasures YouTube: youtube.com/activecountermeasures Antisyphon Training YouTube: youtube.com/antisyphontraining Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com #bhis #infosec
Cubicles & Compromises - Season 1: Episode 1 - The Forge of Insecurity Black Hills Information Security 2022-09-21 | Join us for the first season of Cubicles & Compromises brought to you by Antisyphon Training and Black Hills Information Security. Cubicles & Compromises Season 1 is a 5 episode role playing stream where players will attempt to help Hammer Corp survive all manner of information security disasters. Viewers will learn more about how to help protect their organizations from similar threats all while getting a entertaining dose of infosec knowledge from information security professionals.
AASLR: Defense Evasion – Proxy execution through rundll32 | Carrie Roberts Black Hills Information Security 2022-09-20 | Learn attack emulation tools atomic read team caldera with Carrie Roberts from AntisyphonTraining: antisyphontraining.com/attack-emulation-tools-atomic-red-team-caldera-and-more-w-carrie-roberts00:00 - Intro/Pre-Show Banter 00:55 - T1218 on MITRE ATT&CK 06:00 - Running Atomic Test #211:22 - Running command with ordinal # 16:40 - Atomic Test #4 Rundll32 advpack 21:23 - Testing INF and SCT file 31:37 - Atomic Test #13 Rundll32 with desk.cpl 33:53 - Review35:46 - Defensive Thoughts Description: Carrie Roberts join us to talk about Atomic red team, defense evasion and proxy execution through rundll32. Black Hills Infosec Socials Twitter: twitter.com/BHinfoSecurity LinkedIn: linkedin.com/company/antisyphon-training Discord: discord.gg/ffzdt3WUDe Black Hills Infosec Shirts & Hoodies spearphish-general-store.myshopify.com/collections/bhis-shirt-collections Black Hills Infosec Services Active SOC: blackhillsinfosec.com/services/active-soc Penetration Testing: blackhillsinfosec.com/services Incident Response: blackhillsinfosec.com/services/incident-response Backdoors & Breaches - Incident Response Card Game Backdoors & Breaches: backdoorsandbreaches.com Play B&B Online: play.backdoorsandbreaches.com Antisyphon Training Pay What You Can: antisyphontraining.com/pay-what-you-can Live Training: antisyphontraining.com/course-catalog On Demand Training: antisyphontraining.com/on-demand-course-catalog Educational Infosec Content Black Hills Infosec Blogs: blackhillsinfosec.com/blog Wild West Hackin' Fest YouTube: youtube.com/wildwesthackinfest Active Countermeasures YouTube: youtube.com/activecountermeasures Antisyphon Training YouTube: youtube.com/antisyphontraining Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.co#bhis #infosec
BHIS - Talkin Bout [infosec] News 2022-09-19 Black Hills Information Security 2022-09-19 | Reach out to Black Hills Infosec if you need pentesting, threat hunting, ACTIVE SOC, incident response, or blue team services -- blackhillsinfosec.com 00:00 - PreShow Banter™ — Classic Game Consoles and How To Hack Them 06:09 - BHIS - Talkin’ Bout [infosec] News 2022-09-19 08:30 - Uber Security Update uber.com/newsroom/security-update10:16 - A teen hacked Uber and announced it in the company Slack. Employees thought it was a joke mashable.com/article/uber-teen-hacker-slack-joke36:10 - White House Releases First-Ever Comprehensive Framework for Responsible Development of Digital Assets whitehouse.gov/briefing-room/statements-releases/2022/09/16/fact-sheet-white-house-releases-first-ever-comprehensive-framework-for-responsible-development-of-digital-assets41:53 - GTA 6 source code and videos leaked after Rockstar Games hack bleepingcomputer.com/news/security/gta-6-source-code-and-videos-leaked-after-rockstar-games-hack51:13 - Microsoft Teams stores auth tokens as cleartext in Windows, Linux, Macs bleepingcomputer.com/news/security/microsoft-teams-stores-auth-tokens-as-cleartext-in-windows-linux-macs54:28 - LockBit 3.0 Ransomware Victim: First bounty payout redpacketsecurity.com/lockbit-3-0-ransomware-victim-first-bounty-payout-50000Description: Our September 19, 2022, edition of Talkin’ Bout[infosec]! Brought to you by Black Hills Information Security! We talk about infosec news every Monday at 4:30EST Black Hills Infosec Socials Twitter: twitter.com/BHinfoSecurity LinkedIn: linkedin.com/company/antisyphon-training Discord: discord.gg/ffzdt3WUDe Black Hills Infosec Shirts & Hoodies spearphish-general-store.myshopify.com/collections/bhis-shirt-collections Black Hills Infosec Services Active SOC: blackhillsinfosec.com/services/active-soc Penetration Testing: blackhillsinfosec.com/services Incident Response: blackhillsinfosec.com/services/incident-response Backdoors & Breaches - Incident Response Card Game Backdoors & Breaches: backdoorsandbreaches.com Play B&B Online: play.backdoorsandbreaches.com Antisyphon Training Pay What You Can: antisyphontraining.com/pay-what-you-can Live Training: antisyphontraining.com/course-catalog On Demand Training: antisyphontraining.com/on-demand-course-catalog Educational Infosec Content Black Hills Infosec Blogs: blackhillsinfosec.com/blog Wild West Hackin' Fest YouTube: youtube.com/wildwesthackinfest Active Countermeasures YouTube: youtube.com/activecountermeasures Antisyphon Training YouTube: youtube.com/antisyphontraining Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com #bhis #infosec
BHIS | Coercions and Relays – The First Cred is the Deepest with Gabriel Prudhomme | 1.5 Hours Black Hills Information Security 2022-09-16 | ///Slides: blackhillsinfosec.com/wp-content/uploads/2022/09/Coercions-and-Relays-The-First-Cred-is-the-Deepest.pdf///Chapters00:00:00 - FEATURE PRESENTATION: Coercions and Relays – The First Cred is the Deepest00:00:20 - Agenda00:00:45 - Why This Talk?00:02:10 - Why This Works00:03:44 - Option 100:04:53 - Option 200:09:02 - Recon Tools00:09:16 - 01 - Basic Responder00:11:16 - 02 - Simple Relay (Local Admin SMB to SMB)00:14:41 - 03 - Dump AD Information HTTP to LDAP (IPv6 Poisoning)00:16:39 - 04 – Fake Machine Account Creation via DHCP Poisoning (HTTP to LDAP)00:18:43 - 05 - SMB to SOCKS AD Users, Groups and Machine Accounts Dump (SOCKS)00:22:04 - 06 - Domain Administrator Privilege Escalation NetNTLM v100:26:57 - 07 - Machine Account Admin to (Exchange Trusted Subsystem Group)00:29:41 - 08 - Printer LDAP Pass Back Attack00:31:56 - 09 - MSSQL Relay via XP_DIRTREE00:37:30 - 10 - SCCM Client Push Installation00:39:07 - 11 - Files That Coerce (SMB Share)00:42:33 - Take a break; Let’s all go to the lobby, have a snack!00:43:01 - What is WebDAV?00:45:37 - 12 - Remote Code Execution (RCE) via WebDAV to RBCD Using Unauthenticated PetitPotam Proxy00:53:55 - 13 - Local Privilege Escalation (LPE) via WebDAV to RBCD (Change Lock Screen)00:59:09 - 14 - Local Privilege Escalation (LPE) via WebDAV to Shadow Credentials (Remote C2)01:07:22 - 15 - Unauthenticated ADCS User Templates Dump Via Web (SMB to HTTP)01:09:57 - 16 - Active Directory Certificate Services (ADCS) ESC8 via C2 (PortBender)01:13:50 - 17 - RemotePotato Privilege Escalation via RPC Protocol01:16:53 - 18 - Kerberos Relay DNS Authentication via Mitm6 (Krbrelayx)01:19:57 - 19 - Kerberos KrbRelay and KrbRelayUp Tools Local Privilege Escalation (LPE)01:22:36 - Mitigation01:24:50 - Credit & Reference01:25:32 - Post Show QuestionsIn this 1.5-HOUR, Black Hills Information Security (BHIS) webcast, Gabriel Prud'homme will cover network protocol poisoning, relays, and abuses. Learn how to use Responder, Ntlmrelayx, and Mitm6. From PetitPotam to WebDAV remote and local privilege escalation, and much more. Chat with your fellow attendees in the Infosec Knowledge Sharing Discord server here: discord.gg/fr5wqbF -- in the #webcast-live-chat channel.
