Scaling Up Offensive Pipelines
Gil Biton demonstrates building automated CI/CD weaponization pipelines to scale red team payload generation, obfuscation, and EDR evasion testing.
Summary
The Escalating Complexity of Modern Endpoint Protection
Next-generation EDR solutions with behavioral analysis and cloud telemetry force red teams to invest extensive time engineering evasive payload weaponization pipelines.
Building Automated Offensive CI/CD Pipelines
Gil Biton details designing automated weaponization pipelines that compile, obfuscate, and cryptographically sign implants on demand.
Automated EDR Testing and Validation Harnesses
The author showcases automated staging environments where newly compiled payloads are dynamically tested against multiple live EDR agents before operational deployment.
Scaling Red Team and Purple Team Operations
Biton illustrates how automated pipelines streamline adversary emulation workflows, allowing operators to focus on strategic execution rather than manual tooling builds.
Related talks
Main Track 1·41 min
spaceB0x
Discovering and exploiting CI/CD build system vulnerabilities for container compromise and persistence.
The Linux Foundation·12 min
Tracy Ragan
Explores lightning Talk: SSDF Is Not a Checklist: Turning Tasks Into CI/CD Automation and evaluates key implications for security practitioners.
Hacktivity - IT Security Festival·30 min
Analysts investigate attack surfaces and defenses concerning #Hacktivity2020 // Infra security automation in CI/CD: impossible is nothing. 2/2 by Spyros Manglis.