Part 1Gathering Credentials Through Network Based Attacks Serena DiPenti

>> YOUR LINK HERE: ___ http://youtube.com/watch?v=qstRPJiHUOw

Join us in the Black Hills InfoSec Discord server here: / discord to keep the security conversation going! • In this Black Hills Information Security webcast, Serena will cover different techniques you can use to gather sensitive data and credentials by exploiting protocols through network-based attacks. • Topics include: • spoofing • relays • proxies • tunnels • IPv6 attacks • 📄 Part 1 This Video! • 📄 Part 2 • Part 2-Gathering Credentials Through ... • 📄 Networking for Pentesters: Beginner | Serena DiPenti • • Networking for Pentesters: Beginner |... • 📄 Coercions and Relays – The First Cred is the Deepest with Gabriel Prud'homme • • BHIS | Coercions and Relays – The Fir... • 📄 Eavesarp • https://github.com/arch4ngel/eavesarp • 📄 MITM6 • https://github.com/dirkjanm/mitm6 • 📄 NTLMRelayx • https://github.com/fortra/impacket/bl... • Chapters • 00:00 - Gathering Credentials Through Network Based Attacks • 01:02 - Agenda • 01:17 - SMB Relays • 02:04 - LLMNR • 02:59 - NTLM • 04:09 - SMB Relay Attack • 06:21 - Using Responder and NTLM Relayx • 07:18 - What is responder? • 09:50 - EAVESARP • 11:25 - SNACs • 12:46 - Exploit SNACs • 14:21 - IPV6 Overview • 15:44 - IPV6 Address Types- Unicast • 17:26 - IPV6 Address Types- Anycast Multicast • 17:47 - DHCP V6 • 18:32 - MITM6 Overview • 19:29 - DHCPv6 Discover • 22:01 - Full Attack • 22:51 - WPAD - Windows Proxy Auto Detection • 23:36 - Full Attack (Continued) • 26:55 - Conclusion Questions - Continued in Part 2 • Black Hills Infosec Socials • Twitter: / bhinfosecurity • Mastodon: https://infosec.exchange/@blackhillsi... • LinkedIn: / antisyphon-training • Discord: / discord • Black Hills Infosec Shirts Hoodies • https://spearphish-general-store.mysh... • Black Hills Infosec Services • Active SOC: https://www.blackhillsinfosec.com/ser... • Penetration Testing: https://www.blackhillsinfosec.com/ser... • Incident Response: https://www.blackhillsinfosec.com/ser... • Backdoors Breaches - Incident Response Card Game • Backdoors Breaches: https://www.backdoorsandbreaches.com/ • Play B B Online: https://play.backdoorsandbreaches.com/ • Antisyphon Training • Pay What You Can: https://www.antisyphontraining.com/pa... • Live Training: https://www.antisyphontraining.com/co... • On Demand Training: https://www.antisyphontraining.com/on... • • Educational Infosec Content • Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/ • Wild West Hackin' Fest YouTube: / wildwesthackinfest • Active Countermeasures YouTube: / activecountermeasures • Antisyphon Training YouTube: / antisyphontraining • Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/

#############################

New on site