Want to learn HOW TO do something? This is a great place to start!
WEBCAST: CredDefense Toolkit
Beau Bullock, Brian Fehrman, & Derek Banks // Pentesting organizations as your day-to-day job quickly reveals commonalities among environments. Although each test is a bit unique, there’s a typical path to “winning” that present themselves over and over. Expensive, difficult to configure, and cumbersome to maintain tools exist to help prevent and alert on some […]
WEBCAST: A Look Into Emerging Security Issues Within Cryptocurrency Ecosystems
Mike Felch and Beau Bullock// Cryptocurrency conversations are everywhere you look! Mike Felch and Beau Bullock were so interested they started their own podcast about the topic. We’re excited to have them do a webcast for us and share the research they’ve been doing. Join us as we discuss specifically the security issues swirling around […]
Getting PowerShell Empire Past Windows Defender
Carrie Roberts//* (Updated 2/26/2019) Note: Windows Defender added a detection on 2/25/2019 which now detects this method as “AmsiTamper.A” Windows Defender does a good job of blocking many attacks, including attempts to establish Command & Control (C2) sessions with published tools like PowerShell Empire. I was recently looking for a way to establish such a […]
Bypassing Cylance: Part 2 – Using DNSCat2
David Fletcher // The following techniques serve to illustrate methods for obtaining C2 communication in a particular Cylance protected environment. The configuration of the centralized infrastructure and the endpoint agents were not inspected prior to testing. The environment may exhibit configuration errors and may not conform with best practice for deployment of Cylance infrastructure. However, […]
Cisco Smart Installs and Why They’re Not “Informational”
Jordan Drysdale// tl;dr Cisco Smart Install is awesome (on by default)…for hackers… not sysadmins. So, you Nessus too? Criticals and highs are all that matter! Right??? Until this beauty came along, but wait….this isn’t Critical or High. Let’s just ignore it. What can we do with this thing? Download config Upload config Execute commands […]
Analyzing Extension Effectiveness with Burp
Jordan Drysdale// tl;dr uBlock Origin appears, based on non-scientific testing, to be fairly effective at keeping trackers from making outbound HTTP GET requests. Tested Extensions: No Add-ons v Ghostery v uBlock Origin v AdBlock Plus Analyzed Website homepages: CNN v FoxNews v MSNBC I ran all of the following tests about the same. I clear […]
PODCAST: Creating & Keeping a Malware Zoo
Join John as he covers what he and the BHIS Systems team have been working on lately – creating a C2/Implant/Malware test bed. Testing our C2/malware solutions is important because vendors tend to over-hype their capabilities. He’ll cross reference some different malware specimens with the MITRE ATT&CK framework and cover how you can use these […]
Podcast: Play in new window | Download
I’m resigning from SANS
John Strand// Hello all, Well, this is a painful post to write, so I will get right to it. I am on my last run of classes with the SANS Institute. And, this is a good thing. It is a good thing for SANS SEC504, it is a good thing for me, my family, and […]
The Easiest Con – Hacking the Human & 9 Tips to Avoid Social Engineering
Heather Doerges // Of all the services we offer at BHIS, Social Engineering is the most interesting to me. It’s something (and quite possibly the only thing) I completely understand and feel I am fully capable of doing. I also know that it’s one of the more difficult and uncomfortable things our testers do. This […]
