Post Metasploitation Improving Accuracy and Efficiency
egypt explores post metasploitation improving accuracy and efficiency at DEF CON 20, examining scada and practical defenses.
Summary
Architecture and Background
Post Metasploitation: Improving Accuracy and Efficiency in Post Exploitation Using the Metasploit Framework egypt Developer, Rapid7 As many in this community have echoed, shell is just the beginning. Owning a box is all well and good, but where do you go from there?
Vulnerability Analysis
Everyone has their own secret sauce for furthering their access after gaining a foothold. This talk will focus on the techniques, from simple to advanced, available for post exploitation using the Metasploit Framework.
Exploitation and Demonstrations
egypt is a software developer for Rapid7 where he is a core developer for the Metasploit Framework. Before devoting all his time to Metasploit, he was a Cybersecurity researcher for Idaho National Laboratory where he discovered numerous vulnerabilities in SCADA and Industrial Control Systems and probably didn't write Stuxnet.
Remediation and Defensive Strategies
egypt has presented at DEF CON, BSidesLV, Black Hat, Derbycon and other venues. Note that egypt is not Egypt. The two can be distinguished easily by their relative beards -- Egypt has millions, while egypt only has the one. Twitter: @egyp7
Related talks
Main Stage·49 min
Cutaway
Cutaway details copy of the slides for this talk are here: Whitepaper: Looking Into The Eye Of The Meter Cutaway InGuardians, Inc.
Main Stage·30 min
Jeff Bryner
Jeff Bryner explores kinectasploitv2: kinect meets 20 security tools at DEF CON 20, examining scada and practical defenses.
Main Stage·49 min
Robert Graham · Paul McMillan · Dan Tentler
Robert Graham and Paul McMillan details mass Scanning the Internet: Tips, Tricks, Results Robert Graham Paul McMillan Dan Tentler Scanning the net -- the entire net -- is now a thing.


