Presented at
DerbyCon 7.0 Legacy (2017),
Sept. 22, 2017, 6 p.m.
(55 minutes).
Bruiser was developed to help Information Security professionals emulate advanced techniques seen in the wild. This backdoor leverages steganography and social media to create a stealthy and unpredictable command and control channel. Each implant incorporates unique encryption, and a server based control center allows an operator to easily manage multiple implants at a time. In this talk we'll cover how Bruiser came about, its features and how you can use it to take your engagements to a new level.
Jared Haight is a member of the Windows and Devices Group Red Team at Microsoft. Before joining Microsoft he spent many years in security and operations related positions. When he's not making the world a safer place he enjoys learning and creating new and subversive ways to attack networks and hiking (not always at the same time).
@jaredhaight
Presenters:
Links:
Similar Presentations: