When Everyone's Dog is Named Fluffy
Security researchers examine technical aspects of When Everyone's Dog is Named Fluffy.
Summary
Exploits the Windows 10 security questions feature introduced in April 2018 for durable low-profile backdoor allowing remote distribution to any Win 10 machine without executing code on target. Covers remotely setting security questions, accessing the Password Reset screen, reverting passwords via Mimikatz, and domain-wide persistence after initial compromise using a built-in OS recovery feature. Releases open-source Update-AllUsersQA PowerShell mitigation tool.
Related talks
Videos·34 min
Jayson E. STREET
Engineers explore architecture and security mechanisms for 06 - Jayson E. STREET - Steal everything, kill everyone, cause total financial ruin [EN].
Videos·42 min
Industry experts analyze emerging threats surrounding Exploring AttackIQ Ready! 2.0: Testing for Everyone.
Videos·34 min
AttackIQ Flex
Industry experts analyze emerging threats surrounding AttackIQ Flex: Testing for Everyone..