Blue Team Fundamentals
summary
Shows concrete defender wins and failures: blocks 34,000+ fuzzing requests from one IP (peaked ~93 req/s), fingerprints and blocks Apache Struts CVE-2017-5638 exploit that drops a cron to fetch a payload, analyzes the payload (downloads a JSON config, installs a Monero miner) and traces campaigns that netted at least $74,000 from a vulnerable PHP page. Recommends HTTP host header filtering, blacklist common passwords, and step-up authentication for unknown devices to detect millions-strong credential stuffing and raise attacker cost.
AI-written summary · about
chapters (7)
- 0:00Fundamentals of security
- 3:07Defending against scanning
- 7:58Apache Struts exploits
- 14:19Cryptocurrency mining threats
- 17:09HTTP host header security
- 21:22Targeted attacks and phishing
- 24:13Credential stuffing defenses
related talks
13mFreedom of Security
01h 27mProactive Defense: Leveraging Hacker Tools for Early Vulnerability Detection
38mHackers Gonna Hack: Identifying and Fixing Vulnerabilities Proactively
34mPurple Team Strategies for Application Security
33mOffensive Javascript Techniques for Red Teamers
39mHow to think like a hacker
47mLive Hacking: Breaking into Your Web App
45mAutomatic Discovery of Evasion Vulnerabilities Using Targeted Protocol Fuzzing