Tales of Red Teaming
summary
Shows how attackers use domain fronting via CloudFront to hide C2, patching and using evilOSX with a PR script that auto-creates CNAMEs, LetsEncrypt and reverse SSL proxies, and how a headless browser automates an SSO push to perform a real‑time 2FA bypass during an exercise. Demonstrates npm backdoors via version bumps to land code in production, escapes by mounting /var/run/docker.sock or using CAP_SYS_PTRACE with shocker, and abuses Kubernetes service account tokens and an exposed kubelet on 10250 to steal secrets and pivot to production.
AI-written summary · about
chapters (11)
- 0:00Introduction to Red Teaming
- 1:55Modern Red Teaming Goals
- 3:42Domain Fronting Basics
- 7:15Evil OSX Malware Demo
- 10:062FA Session Hijacking
- 12:40Pipeline Backdoor Attacks
- 15:55Docker Container Escapes
- 21:08Kubernetes Privilege Escalation
- 26:39Final Attack Path to Goal
- 27:23Key Takeaways and Summary
- 28:36Q&A Session
related talks
33mOffensive Javascript Techniques for Red Teamers
48mHacking Exposed: Next-Generation Tactics, Techniques, and Procedures
49mStories from the trenches - How a red team exercise gained full control of a client network
37mAutomation Tactics for Modern Threat Emulation
19mHacking Kubernetes
12mIntroduction To Red Team Tooling And Opsec
33mHack Back; Let’s Learn Security With CTFs!
22mSecurity Showdown: The Overconfident Operator Vs the Nefarious...