Casting with the Pros Tips and Tricks

In this presentation at the DEF CON 27 Red Team Village, Nathan Sweaney shares advanced social engineering methodologies and tradecraft for professional red team operations. He begins at 06:00 by emphasizing the importance of high-fidelity threat emulation, explaining that realistic assessments must mirror sophisticated adversary playbooks to properly evaluate an organization's defense-in-depth posture from external perimeter to internal domain controller.

Nathan discusses analyzing workflow bottlenecks and policy gaps at 12:00, showing how defenders often rely on technical controls that degrade under operational pressure. At 18:00, he demonstrates chaining web application vulnerabilities with targeted phishing campaigns, using Cross-Site Scripting (XSS) on trusted partner portals to execute authenticated actions. At 24:00, he illustrates weaponizing Cross-Site Request Forgery (CSRF) via phishing links, executing an administrative API call that silently adds a red team account into the Domain Admins active directory group.

Addressing corporate context at 30:00, Nathan recounts working with executives following high-profile incidents like the OPM breach, explaining how to communicate systemic risk without inducing organizational paralysis. He finishes at 36:00 by demonstrating how to craft email templates that evade advanced threat protection filters and spam gateways, emphasizing that testing must validate human reporting mechanisms alongside technical perimeter controls. (AI summary — Gemini Flash)