Skip to content

Post Metasploitation Improving Accuracy and Efficiency

egypt

egypt explores post metasploitation improving accuracy and efficiency at DEF CON 20, examining scada and practical defenses.

Summary

Architecture and Background

Post Metasploitation: Improving Accuracy and Efficiency in Post Exploitation Using the Metasploit Framework egypt Developer, Rapid7 As many in this community have echoed, shell is just the beginning. Owning a box is all well and good, but where do you go from there?

Vulnerability Analysis

Everyone has their own secret sauce for furthering their access after gaining a foothold. This talk will focus on the techniques, from simple to advanced, available for post exploitation using the Metasploit Framework.

Exploitation and Demonstrations

egypt is a software developer for Rapid7 where he is a core developer for the Metasploit Framework. Before devoting all his time to Metasploit, he was a Cybersecurity researcher for Idaho National Laboratory where he discovered numerous vulnerabilities in SCADA and Industrial Control Systems and probably didn't write Stuxnet.

Remediation and Defensive Strategies

egypt has presented at DEF CON, BSidesLV, Black Hat, Derbycon and other venues. Note that egypt is not Egypt. The two can be distinguished easily by their relative beards -- Egypt has millions, while egypt only has the one. Twitter: @egyp7

Related talks

Main Stage·49 min

  • DEF CON
  • ICS / OT
  • Date: Aug 2014
  • Location: Las Vegas

Robert Graham · Paul McMillan · Dan Tentler

Robert Graham and Paul McMillan details mass Scanning the Internet: Tips, Tricks, Results Robert Graham Paul McMillan Dan Tentler Scanning the net -- the entire net -- is now a thing.

ics-securityscadacritical-infrastructure+1