These are the videos from Derbycon 2018:
http://www.irongeek.com/i.php?page=videos/derbycon8/mainlist

Patreon:
https://www.patreon.com/irongeek

Hide your Powershell script in plain sight. Bypass all Powershell security features - OmerYa/Invisi-Shell

Every time I think I start to understand Active Directory and Kerberos, a new topic pops up to mess with my head. A few weeks ago, @elad_shamir contacted @tifkin_ and myself with some ideas about…

https://2018.chcon.nz/mainevent.html

Tim MalcomVetter, Walmart

We have this saying on my red team that we borrowed from the NSA Red Team: “if we win, we lose.” It reveals the dichotomy of excelling at both offense and defense. We want our Red Teams to try to win, right? Or was it Blue? The…

Tim MalcomVetter, Walmart We have this saying on my red team that we borrowed from the NSA Red Team: “if we win, we lose.” It reveals the dichotomy of excellin…

I've been a red teamer for twenty years now, perhaps even longer, but I didn't know what to call it until 1995 when I started working with the Department of Defense. I've also been fortunate

A hidden feature of Metasploit, is the ability to add SMB Named Pipe listeners in a meterpreter session to pivot on an internal network…

During my study time for mobile application testing, I came to the realization that there are a lot of bad coding practices taking place…

Lateral Movement Technique Description

Introduction

Hello again. In my previous posts I detailed how to manually get SYSTEM shell from Local Administrators users. That’s interesting but very late game during a penetration assessment as it is presumed that you already owned the target machine.

A C# penetration testing tool to discover low-haning web fruit via web requests. - rvrsh3ll/SharpFruit

In this post I wanted to look at a technique which is by no means new to .NET developers, but may prove useful to redteamers crafting their tools... exporting .NET static methods within a DLL... AKA using RunDLL32 to launch your .NET assembly.

As offensive toolsets continue to move towards using C# as the language of choice for post-exploitation, I thought it’d be useful to think…

Introduction